Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252771	7.6	危険	Mozilla Foundation	-	Mozilla Firefox の nsDocument::MaybePreLoadImage 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0168	2010-04-6 16:49	2010-03-23	Show	GitHub Exploit DB Packet Storm

252772	9.3	危険	Mozilla Foundation	-	Mozilla Firefox の imgContainer::InternalAddFrameHelper 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0164	2010-04-6 16:49	2010-03-23	Show	GitHub Exploit DB Packet Storm

252773	4.3	警告	Mozilla Foundation レッドハット	-	複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0171	2010-04-5 14:54	2010-03-23	Show	GitHub Exploit DB Packet Storm

252774	4.3	警告	Mozilla Foundation	-	Mozilla Firefox における同一生成元ポリシーを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0170	2010-04-5 14:53	2010-03-23	Show	GitHub Exploit DB Packet Storm

252775	7.5	危険	Heartlogic	-	HL-SiteManager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1331	2010-04-2 15:02	2010-04-2	Show	GitHub Exploit DB Packet Storm

252776	9.3	危険	Mozilla Foundation	-	Mozilla Firefox の Web Open Fonts Format デコーダにおける整数オーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2010-1028	2010-04-2 14:05	2010-03-19	Show	GitHub Exploit DB Packet Storm

252777	5	警告	富士通アクセラテクノロジ	-	Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性	CWE-200 情報漏えい	-	2010-04-2 14:05	2010-03-10	Show	GitHub Exploit DB Packet Storm

252778	1.9	注意	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3556	2010-04-2 14:02	2010-01-19	Show	GitHub Exploit DB Packet Storm

252779	10	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-4538	2010-04-2 14:02	2010-01-12	Show	GitHub Exploit DB Packet Storm

252780	6.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3939	2010-04-2 14:00	2009-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297851	-	microsoft	windows_7 windows_xp windows_server_2003 windows_2003_server windows_server_2008 windows_vista	The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB ser…	CWE-20 Improper Input Validation	CVE-2011-0660	2024-11-21 10:24	2011-04-14	Show	GitHub Exploit DB Packet Storm

297852	-	microsoft	windows_server_2008 windows_xp windows_7 windows_vista windows_server_2003 windows_2003_server	DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does no…	CWE-20 Improper Input Validation	CVE-2011-0657	2024-11-21 10:24	2011-04-14	Show	GitHub Exploit DB Packet Storm

297853	-	microsoft	open_xml_file_format_converter office powerpoint powerpoint_web_app office_compatibility_pack powerpoint_viewer office_powerpoint_viewer	Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 200…	CWE-20 Improper Input Validation	CVE-2011-0656	2024-11-21 10:24	2011-04-14	Show	GitHub Exploit DB Packet Storm

297854	-	microsoft	open_xml_file_format_converter office powerpoint powerpoint_web_app office_compatibility_pack powerpoint_viewer office_powerpoint_viewer	Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; P…	CWE-20 Improper Input Validation	CVE-2011-0655	2024-11-21 10:24	2011-04-14	Show	GitHub Exploit DB Packet Storm

297855	-	tincan	phplist	Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) edit admini…	CWE-352 Origin Validation Error	CVE-2011-0748	2024-11-21 10:24	2011-04-13	Show	GitHub Exploit DB Packet Storm

297856	-	zyxel	o2_dsl_router_classic	Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests t…	CWE-352 Origin Validation Error	CVE-2011-0746	2024-11-21 10:24	2011-04-13	Show	GitHub Exploit DB Packet Storm

297857	-	pwhois	layer_four_traceroute	Unspecified vulnerability in lft in pWhois Layer Four Traceroute (LFT) 3.x before 3.3 allows local users to gain privileges via a crafted command line.	NVD-CWE-noinfo	CVE-2011-0765	2024-11-21 10:24	2011-04-10	Show	GitHub Exploit DB Packet Storm

297858	-	novell	opensuse_build_service	The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a (1) package or (2) project via unspec…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-0466	2024-11-21 10:24	2011-04-10	Show	GitHub Exploit DB Packet Storm

297859	-	linux canonical	linux_kernel ubuntu_linux	The ocfs2_prepare_page_for_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 (OCFS2) subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page…	CWE-20 Improper Input Validation	CVE-2011-0463	2024-11-21 10:24	2011-04-10	Show	GitHub Exploit DB Packet Storm

297860	-	novell	opensuse_build_service	Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject arbitrary web script or…	CWE-79 Cross-site Scripting	CVE-2011-0462	2024-11-21 10:24	2011-04-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed