Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252561	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	Apache の mod_proxy_ftp モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2939	2010-11-4 15:35	2008-08-6	Show	GitHub Exploit DB Packet Storm

252562	1.9	注意	オラクル	-	Oracle Solaris および OpenSolaris における USB の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3542	2010-11-4 15:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

252563	2.4	注意	オラクル	-	Oracle Solaris および OpenSolaris における Device Drivers の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3513	2010-11-4 15:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

252564	3.2	注意	オラクル	-	Oracle Solaris における Solaris Zones の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3508	2010-11-4 15:30	2010-10-12	Show	GitHub Exploit DB Packet Storm

252565	3.5	注意	オラクル	-	Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3512	2010-11-2 15:53	2010-10-12	Show	GitHub Exploit DB Packet Storm

252566	3.6	注意	オラクル	-	Oracle Solaris および OpenSolaris における SCSI enclosure services デバイスドライバの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3576	2010-11-2 15:53	2010-10-12	Show	GitHub Exploit DB Packet Storm

252567	4	警告	オラクル	-	Oracle Solaris および OpenSolaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3540	2010-11-2 15:53	2010-10-12	Show	GitHub Exploit DB Packet Storm

252568	4	警告	オラクル	-	Oracle Solaris および OpenSolaris における InfiniBand の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3516	2010-11-2 15:52	2010-10-12	Show	GitHub Exploit DB Packet Storm

252569	4	警告	オラクル	-	Oracle Solaris および OpenSolaris の Solaris コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3515	2010-11-2 15:52	2010-10-12	Show	GitHub Exploit DB Packet Storm

252570	4.3	警告	オラクル	-	Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3514	2010-11-2 15:52	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
289301	8.8	HIGH Network	impulseadventure	jpegsnoop	A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious user execute arbitrary code	NVD-CWE-noinfo	CVE-2012-6307	2024-11-21 10:45	2020-02-7	Show	GitHub Exploit DB Packet Storm

289302	9.8	CRITICAL Network	hcview_project	hcview	A vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a GIF file.	NVD-CWE-noinfo	CVE-2012-6306	2024-11-21 10:45	2020-02-7	Show	GitHub Exploit DB Packet Storm

289303	8.8	HIGH Network	dd-wrt	dd-wrt	Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious user cause a Denial…	CWE-352 Origin Validation Error	CVE-2012-6297	2024-11-21 10:45	2020-02-7	Show	GitHub Exploit DB Packet Storm

289304	9.8	CRITICAL Network	zpanelcp	zpanel	ZPanel 10.0.1 has insufficient entropy for its password reset process.	CWE-798 CWE-640 Use of Hard-coded Credentials Weak Password Recovery Mechanism for Forgotten Password	CVE-2012-5686	2024-11-21 10:45	2020-02-4	Show	GitHub Exploit DB Packet Storm

289305	6.1	MEDIUM Network	roundup-tracker	roundup	Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to i…	CWE-79 Cross-site Scripting	CVE-2012-6133	2024-11-21 10:45	2020-01-31	Show	GitHub Exploit DB Packet Storm

289306	5.4	MEDIUM Network	dokeos	dokeos	Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.	CWE-79 Cross-site Scripting	CVE-2012-5776	2024-11-21 10:45	2020-01-30	Show	GitHub Exploit DB Packet Storm

289307	5.5	MEDIUM Local	git-extras_project	git-extras	The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort.	CWE-59 Link Following	CVE-2012-6114	2024-11-21 10:45	2020-01-29	Show	GitHub Exploit DB Packet Storm

289308	7.8	HIGH Local	soapbox_project	soapbox	Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.	CWE-269 Improper Privilege Management	CVE-2012-6302	2024-11-21 10:45	2020-01-25	Show	GitHub Exploit DB Packet Storm

289309	7.5	HIGH Network	freeciv	freeciv	Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.	CWE-400 Uncontrolled Resource Consumption	CVE-2012-6083	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

289310	9.8	CRITICAL Network	ht_editor_project	ht_editor	HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability	CWE-787 Out-of-bounds Write	CVE-2012-5867	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm