Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252361	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3335	2010-12-6 15:36	2010-11-9	Show	GitHub Exploit DB Packet Storm

252362	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3334	2010-12-6 15:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

252363	4.3	警告	Zope Foundation	-	Zope Object Database の ZEO/StorageServer.py におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-3495	2010-12-6 15:20	2010-10-19	Show	GitHub Exploit DB Packet Storm

252364	4.3	警告	マイクロソフト	-	複数の Microsoft 製品の toStaticHTML 関数および SafeHTML 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3324	2010-12-3 14:05	2010-10-12	Show	GitHub Exploit DB Packet Storm

252365	6.8	警告	アップル	-	Apple Mac OS X の xar におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3798	2010-12-3 13:13	2010-11-16	Show	GitHub Exploit DB Packet Storm

252366	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3797	2010-12-3 13:12	2010-11-16	Show	GitHub Exploit DB Packet Storm

252367	4.3	警告	アップル	-	Apple Mac OS X の Safari RSS における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3796	2010-12-3 13:10	2010-11-16	Show	GitHub Exploit DB Packet Storm

252368	6	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスレッドハット	-	PostgreSQL の PL/perl および PL/Tcl 実装における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3433	2010-12-2 17:11	2010-10-4	Show	GitHub Exploit DB Packet Storm

252369	6.8	警告	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType の Mac_Read_POST_Resource 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2808	2010-12-2 17:08	2010-08-19	Show	GitHub Exploit DB Packet Storm

252370	5	警告	アップルサイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType の Standard Encoding Accented Character の呼び出しにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3054	2010-12-2 16:34	2010-08-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
280181	-	cisco	unified_communications_manager	The Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via a crafted para…	CWE-20 Improper Input Validation	CVE-2014-3316	2024-11-21 11:07	2014-07-10	Show	GitHub Exploit DB Packet Storm

280182	-	cisco	unified_communications_manager	Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web s…	CWE-79 Cross-site Scripting	CVE-2014-3315	2024-11-21 11:07	2014-07-10	Show	GitHub Exploit DB Packet Storm

280183	-	cisco	webex_meeting_center webex_meetings_server	Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted d…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-3311	2024-11-21 11:07	2014-07-10	Show	GitHub Exploit DB Packet Storm

280184	-	cisco	webex_meeting_center webex_meetings_server	The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to …	CWE-20 Improper Input Validation	CVE-2014-3310	2024-11-21 11:07	2014-07-10	Show	GitHub Exploit DB Packet Storm

280185	-	liferay	liferay_portal	Multiple cross-site scripting (XSS) vulnerabilities in group/control_panel/manage in Liferay Portal 6.1.2 CE GA3, 6.1.X EE, and 6.2.X EE allow remote attackers to inject arbitrary web script or HTML …	CWE-79 Cross-site Scripting	CVE-2014-2963	2024-11-21 11:07	2014-07-10	Show	GitHub Exploit DB Packet Storm

280186	-	cisco	ios ios_xe	The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3309	2024-11-21 11:07	2014-07-9	Show	GitHub Exploit DB Packet Storm

280187	-	cisco	spa_512g_1-line_ip_phone spa941_4-line_ip_phone_with_1-port_ethernet spa_504g_4-line_ip_phone spa_525g_5-line_ip_phone spa_301_1_line_ip_phone spa962_6-line_ip_phone_with_2-port_switch…	Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a…	CWE-79 Cross-site Scripting	CVE-2014-3313	2024-11-21 11:07	2014-07-9	Show	GitHub Exploit DB Packet Storm

280188	-	cisco	spa_512g_1-line_ip_phone spa941_4-line_ip_phone_with_1-port_ethernet spa_504g_4-line_ip_phone spa_525g_5-line_ip_phone spa_301_1_line_ip_phone spa962_6-line_ip_phone_with_2-port_switch…	The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or m…	CWE-287 Improper Authentication	CVE-2014-3312	2024-11-21 11:07	2014-07-9	Show	GitHub Exploit DB Packet Storm

280189	-	avg	safeguard secure_search_toolbar	ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access c…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2956	2024-11-21 11:07	2014-07-8	Show	GitHub Exploit DB Packet Storm

280190	-	cisco	ios_xr asr_9000_rsp440_router asr_9001 asr_9006 asr_9010 asr_9904 asr_9912 asr_9922	Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka B…	CWE-20 Improper Input Validation	CVE-2014-3308	2024-11-21 11:07	2014-07-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed