Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252801	7.6	危険	アップル	-	Apple Safari における window オブジェクトの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-1939	2010-08-16 15:08	2010-05-12	Show	GitHub Exploit DB Packet Storm

252802	7.6	危険	IBM	-	IBM Lotus Domino Web Access の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0919	2010-08-16 15:05	2010-03-3	Show	GitHub Exploit DB Packet Storm

252803	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品における重要な cross-origin 情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1207	2010-08-13 17:15	2010-07-20	Show	GitHub Exploit DB Packet Storm

252804	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品におけるクローム特権で任意の JavaScript コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1215	2010-08-13 17:14	2010-07-20	Show	GitHub Exploit DB Packet Storm

252805	7.8	危険	マイクロソフト	-	Microsoft Windows におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1892	2010-08-13 14:01	2010-08-13	Show	GitHub Exploit DB Packet Storm

252806	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1212	2010-08-12 19:03	2010-07-20	Show	GitHub Exploit DB Packet Storm

252807	4.3	警告	アップルサイバートラスト株式会社レッドハットターボリナックス CUPS	-	Apple Mac OS X の CUPS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2820	2010-08-12 17:29	2009-11-9	Show	GitHub Exploit DB Packet Storm

252808	9.3	危険	アップル	-	Apple iTunes におけるバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1777	2010-08-11 18:31	2010-07-19	Show	GitHub Exploit DB Packet Storm

252809	2.6	注意	ISC, Inc.	-	BIND におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0213	2010-08-11 18:30	2010-07-15	Show	GitHub Exploit DB Packet Storm

252810	5	警告	ISC, Inc.	-	ISC DHCP にサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-2156	2010-08-11 18:29	2010-07-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270851	-	thecartpress	thecartpress_ecommerce_shopping_cart	Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allow remote atta…	CWE-79 Cross-site Scripting	CVE-2015-3300	2024-11-21 11:29	2015-05-14	Show	GitHub Exploit DB Packet Storm

270852	-	stunnel	stunnel	Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentica…	CWE-284 Improper Access Control	CVE-2015-3644	2024-11-21 11:29	2015-05-14	Show	GitHub Exploit DB Packet Storm

270853	-	yiiframework	yiiframework	Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON, arrays, and Internet Explorer 6 or 7.	CWE-79 Cross-site Scripting	CVE-2015-3397	2024-11-21 11:29	2015-05-14	Show	GitHub Exploit DB Packet Storm

270854	-	trend_micro	scanmail	Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predi…	NVD-CWE-Other	CVE-2015-3326	2024-11-21 11:29	2015-05-14	Show	GitHub Exploit DB Packet Storm

270855	-	qemu redhat xen	qemu openstack enterprise_linux enterprise_virtualization xen	The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arb…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3456	2024-11-21 11:29	2015-05-14	Show	GitHub Exploit DB Packet Storm

270856	-	openstack oracle	keystone solaris	OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and othe…	CWE-200 Information Exposure	CVE-2015-3646	2024-11-21 11:29	2015-05-13	Show	GitHub Exploit DB Packet Storm

270857	-	opensuse fedoraproject gnu	opensuse fedora libtasn1	The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3622	2024-11-21 11:29	2015-05-13	Show	GitHub Exploit DB Packet Storm

270858	-	fortinet	fortimanager_firmware fortianalyzer_firmware	Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 th…	CWE-79 Cross-site Scripting	CVE-2015-3620	2024-11-21 11:29	2015-05-13	Show	GitHub Exploit DB Packet Storm

270859	-	xml-libxml_project canonical debian fedoraproject opensuse	xml-libxml ubuntu_linux debian_linux fedora opensuse	The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to t…	CWE-611 XXE	CVE-2015-3451	2024-11-21 11:29	2015-05-13	Show	GitHub Exploit DB Packet Storm

270860	-	thekelleys oracle	dnsmasq solaris	The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of se…	CWE-19 Data Processing Errors	CVE-2015-3294	2024-11-21 11:29	2015-05-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed