Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252341	9.3	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1813	2010-12-8 15:52	2010-09-8	Show	GitHub Exploit DB Packet Storm

252342	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0784	2010-12-8 15:31	2010-11-9	Show	GitHub Exploit DB Packet Storm

252343	6.8	警告	シックス・アパート株式会社	-	Movable Type における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3922	2010-12-8 14:02	2010-12-8	Show	GitHub Exploit DB Packet Storm

252344	4.3	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3921	2010-12-8 14:02	2010-12-8	Show	GitHub Exploit DB Packet Storm

252345	2.1	注意	セイコーエプソン株式会社	-	EPSON 製プリンタドライバのインストーラがアクセス権を変更する脆弱性	CWE-DesignError	CVE-2010-3920	2010-12-8 14:01	2010-12-8	Show	GitHub Exploit DB Packet Storm

252346	10	危険	アドビシステムズ	-	Adobe Flash Media Server における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3635	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252347	5	警告	アドビシステムズ	-	Adobe Flash Media Server のエッジプロセスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3634	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252348	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2010-3633	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252349	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Signurl.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3936	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252350	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway のモバイルポータルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2734	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293291	-		libreoffice debian redhat apache fedoraproject	libreoffice debian_linux enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_desktop enterprise_linux_server enterprise_linux enterprise_linux_workstation	Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application c…	CWE-189 Numeric Errors	CVE-2012-1149	2024-11-21 10:36	2012-06-22	Show	GitHub Exploit DB Packet Storm

293292	-		debian	advanced_package_tool	APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attacker…	CWE-20 Improper Input Validation	CVE-2012-0954	2024-11-21 10:36	2012-06-20	Show	GitHub Exploit DB Packet Storm

293293	-		canonical	ubuntu_linux	The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade directory when reporting bugs to Launchpad, which allows rem…	CWE-200 Information Exposure	CVE-2012-0950	2024-11-21 10:36	2012-06-20	Show	GitHub Exploit DB Packet Storm

293294	-		redhat	satellite	spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remot…	CWE-287 Improper Authentication	CVE-2012-1145	2024-11-21 10:36	2012-06-16	Show	GitHub Exploit DB Packet Storm

293295	-		canonical gnome	ubuntu_linux update-manager-core	DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0948	2024-11-21 10:36	2012-06-8	Show	GitHub Exploit DB Packet Storm

293296	-		mit	kerberos_5	The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a deni…	NVD-CWE-Other	CVE-2012-1013	2024-11-21 10:36	2012-06-8	Show	GitHub Exploit DB Packet Storm

293297	-		mit	kerberos_5	server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which m…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-1012	2024-11-21 10:36	2012-06-8	Show	GitHub Exploit DB Packet Storm

293298	-		sony	vaio_easy_connect smartwi_connection_utillity vaio_wireless_wizard vaio_pc_wireless_lan_wizard	Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Conn…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0985	2024-11-21 10:36	2012-06-8	Show	GitHub Exploit DB Packet Storm

293299	5.5	MEDIUM Local	imagemagick debian canonical opensuse	imagemagick debian_linux ubuntu_linux opensuse	Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in …	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2012-1186	2024-11-21 10:36	2012-06-6	Show	GitHub Exploit DB Packet Storm

293300	7.8	HIGH Local	imagemagick debian canonical opensuse	imagemagick debian_linux ubuntu_linux opensuse	Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execu…	CWE-190 Integer Overflow or Wraparound	CVE-2012-1185	2024-11-21 10:36	2012-06-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed