Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252351	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web Monitor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2733	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252352	5.8	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web インターフェースにおける任意の Web サイトへリダイレクトされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2732	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252353	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の AES および RC4 の復号化機能における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4212	2010-12-7 16:40	2010-01-12	Show	GitHub Exploit DB Packet Storm

252354	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	MIT Kerberos の asn1_decode_generaltime 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0846	2010-12-7 16:39	2009-04-7	Show	GitHub Exploit DB Packet Storm

252355	5	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の spnego_gss_accept_sec_context 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0845	2010-12-7 16:38	2009-03-27	Show	GitHub Exploit DB Packet Storm

252356	5.8	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の SPNEGO 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0844	2010-12-7 16:38	2009-04-7	Show	GitHub Exploit DB Packet Storm

252357	4	警告	Pidgin レッドハット	-	Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3711	2010-12-7 15:44	2010-05-12	Show	GitHub Exploit DB Packet Storm

252358	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3336	2010-12-6 16:51	2010-11-9	Show	GitHub Exploit DB Packet Storm

252359	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2573	2010-12-6 16:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

252360	9.3	危険	マイクロソフト	-	Microsoft Office における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3337	2010-12-6 15:44	2010-08-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294231	-	cisco	ip_communicator	The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to c…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0361	2024-11-21 10:34	2012-05-2	Show	GitHub Exploit DB Packet Storm

294232	-	cisco	ios	Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary …	CWE-20 Improper Input Validation	CVE-2012-0339	2024-11-21 10:34	2012-05-2	Show	GitHub Exploit DB Packet Storm

294233	-	cisco	ios	Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary sou…	CWE-20 Improper Input Validation	CVE-2012-0338	2024-11-21 10:34	2012-05-2	Show	GitHub Exploit DB Packet Storm

294234	-	cisco	unified_meetingplace	SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.	CWE-89 SQL Injection	CVE-2012-0337	2024-11-21 10:34	2012-05-2	Show	GitHub Exploit DB Packet Storm

294235	-	cisco	adaptive_security_appliance_software 5500_series_adaptive_security_appliance	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote …	CWE-287 Improper Authentication	CVE-2012-0335	2024-11-21 10:34	2012-05-2	Show	GitHub Exploit DB Packet Storm

294236	-	cisco	small_business_ip_phone_firmware small_business_ip_phone	Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML doc…	CWE-287 Improper Authentication	CVE-2012-0333	2024-11-21 10:34	2012-05-2	Show	GitHub Exploit DB Packet Storm

294237	-	quest	toad_for_data_analysts	Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse f…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0279	2024-11-21 10:34	2012-05-2	Show	GitHub Exploit DB Packet Storm

294238	-	justsystems	just_school shuriken shuriken_pro ichitaro ichitaro_viewer just_frontier rekishimail_sengokubusho_no_missho rekishimail_bakumatsushishi_no_missho just_jump oreplug ichit…	Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0269	2024-11-21 10:34	2012-04-28	Show	GitHub Exploit DB Packet Storm

294239	-	debian	apache2	The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides exa…	NVD-CWE-Other	CVE-2012-0216	2024-11-21 10:34	2012-04-23	Show	GitHub Exploit DB Packet Storm

294240	-	emc	data_protection_advisor	Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value…	CWE-189 Numeric Errors	CVE-2012-0407	2024-11-21 10:34	2012-04-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed