Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252791 | 4.3 | 警告 | Peter Proell | - | TYPO3 用の XING Button におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4885 | 2012-01-19 11:09 | 2010-09-2 | Show | GitHub Exploit DB Packet Storm |
| 252792 | 7.5 | 危険 | Hinnendahl | - | Gaestebuch の guestbook/gbook.php におけるリモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4884 | 2012-01-19 11:08 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 252793 | 2.6 | 注意 | MODX | - | MODx Revolution の manager/index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4883 | 2012-01-19 11:06 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 252794 | 4.3 | 警告 | Ventics | - | Auto CMS の autocms.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4882 | 2012-01-19 11:06 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 252795 | 6.8 | 警告 | ApPHP | - | ApPHP Calendar の calendar.class.php におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2010-4881 | 2012-01-19 10:33 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 252796 | 4.3 | 警告 | ApPHP | - | ApPHP Calendar の calendar.class.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4880 | 2012-01-19 10:33 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 252797 | 7.5 | 危険 | Hinnendahl | - | Kontakt Formular の formmailer.php における任意の PHP コードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4878 | 2012-01-19 10:32 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 252798 | 4.3 | 警告 | InsaneVisions | - | OneCMS の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4877 | 2012-01-19 10:31 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 252799 | 7.5 | 危険 | got milk | - | mBlogger の viewpost.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4876 | 2012-01-19 10:30 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 252800 | 4.3 | 警告 | Xondie | - | WordPress 用 Vodpod Video Gallery プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4875 | 2012-01-19 10:30 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 5, 2026, 4:11 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 264571 | 7.8 |
HIGH
Local |
google linux |
android linux_kernel |
An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critic… |
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition |
CVE-2017-0331 | 2024-11-21 12:02 | 2017-05-3 | Show | GitHub Exploit DB Packet Storm |
| 264572 | 7.5 |
HIGH
Network |
irregex_project | irregex | The backtrack compilation code in the Irregex package (aka IrRegular Expressions) before 0.9.6 for Scheme allows remote attackers to cause a denial of service (memory consumption) via a crafted regul… |
CWE-399
Resource Management Errors |
CVE-2016-9954 | 2024-11-21 12:02 | 2017-04-22 | Show | GitHub Exploit DB Packet Storm |
| 264573 | 5.4 |
MEDIUM
Network |
ibm | curam_social_program_management | IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intende… |
CWE-79
Cross-site Scripting |
CVE-2016-9980 | 2024-11-21 12:02 | 2017-04-21 | Show | GitHub Exploit DB Packet Storm |
| 264574 | 5.4 |
MEDIUM
Network |
ibm | curam_social_program_management | IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intende… |
CWE-79
Cross-site Scripting |
CVE-2016-9979 | 2024-11-21 12:02 | 2017-04-21 | Show | GitHub Exploit DB Packet Storm |
| 264575 | 4.3 |
MEDIUM
Network |
ibm | curam_social_program_management | IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive information. IBM X-Force ID: 120254. |
CWE-200
Information Exposure |
CVE-2016-9978 | 2024-11-21 12:02 | 2017-04-21 | Show | GitHub Exploit DB Packet Storm |
| 264576 | 7.8 |
HIGH
Local |
opensuse_project suse opensuse game-music-emu_project |
leap linux_enterprise_software_development_kit linux_enterprise_desktop linux_enterprise linux_enterprise_workstation_extension opensuse suse_linux_enterprise_server game-music-e… |
game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. |
CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write |
CVE-2016-9959 | 2024-11-21 12:02 | 2017-04-13 | Show | GitHub Exploit DB Packet Storm |
| 264577 | 7.8 |
HIGH
Local |
opensuse_project suse opensuse game-music-emu_project |
leap linux_enterprise_software_development_kit linux_enterprise_desktop linux_enterprise linux_enterprise_workstation_extension opensuse suse_linux_enterprise_server game-music-e… |
game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2016-9958 | 2024-11-21 12:02 | 2017-04-13 | Show | GitHub Exploit DB Packet Storm |
| 264578 | 7.8 |
HIGH
Local |
opensuse_project suse opensuse game-music-emu_project |
leap linux_enterprise_software_development_kit linux_enterprise_desktop linux_enterprise linux_enterprise_workstation_extension opensuse suse_linux_enterprise_server game-music-e… |
Stack-based buffer overflow in game-music-emu before 0.6.1. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2016-9957 | 2024-11-21 12:02 | 2017-04-13 | Show | GitHub Exploit DB Packet Storm |
| 264579 | 5.5 |
MEDIUM
Local |
microsoft |
windows_rt_8.1 windows_server_2012 windows_server_2016 windows_10 windows_8.1 |
An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when … |
CWE-610
Externally Controlled Reference to a Resource in Another Sphere |
CVE-2017-0211 | 2024-11-21 12:02 | 2017-04-12 | Show | GitHub Exploit DB Packet Storm |
| 264580 | 4.3 |
MEDIUM
Network |
microsoft | edge | An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability … |
CWE-200
Information Exposure |
CVE-2017-0208 | 2024-11-21 12:02 | 2017-04-12 | Show | GitHub Exploit DB Packet Storm |