Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253371	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0768	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

253372	4	警告	IBM	-	IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0770	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

253373	5	警告	IBM	-	IBM WebSphere Application Server (WAS) の Administrative Console コンポーネントにおける WAS セッションの内容を読まれる脆弱性	CWE-200 情報漏えい	CVE-2009-1898	2010-05-27 17:24	2009-06-3	Show	GitHub Exploit DB Packet Storm

253374	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live 2009 および teTeX の dvipsk/dospecial.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1440	2010-05-26 16:33	2010-05-6	Show	GitHub Exploit DB Packet Storm

253375	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live および teTeX の predospecial 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0739	2010-05-26 16:32	2010-04-16	Show	GitHub Exploit DB Packet Storm

253376	9.3	危険	アドビシステムズ	-	Adobe Photoshop CS4 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1279	2010-05-26 16:32	2010-04-30	Show	GitHub Exploit DB Packet Storm

253377	9.3	危険	レッドハット freedesktop.org サイバートラスト株式会社 Glyph & Cog, LLC	-	Xpdf および Poppler の ObjectStream::ObjectStream 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3608	2010-05-26 16:31	2009-10-15	Show	GitHub Exploit DB Packet Storm

253378	6.8	警告	サイバートラスト株式会社レッドハット CUPS	-	CUPS の pdftops フィルタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0791	2010-05-26 16:30	2009-06-3	Show	GitHub Exploit DB Packet Storm

253379	6.8	警告	レッドハット Glyph & Cog, LLC サイバートラスト株式会社 CUPS	-	Xpdf および CUPS におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0195	2010-05-26 16:30	2009-04-16	Show	GitHub Exploit DB Packet Storm

253380	4.3	警告	Glyph & Cog, LLC freedesktop.org 日本電気サイバートラスト株式会社 CUPS レッドハット	-	JBIG2 MMR デコーダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1183	2010-05-26 16:30	2009-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297121	-	microsoft	excel	Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability."	CWE-399 Resource Management Errors	CVE-2011-1986	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

297122	-	microsoft	office open_xml_file_format_converter sharepoint_server excel excel_viewer office_compatibility_pack excel_web_app	Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Ma…	CWE-20 Improper Input Validation	CVE-2011-1989	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

297123	-	microsoft	windows_server_2008 windows_server_2003 windows_2003_server	WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation o…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-1984	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

297124	-	microsoft	office	Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a…	CWE-20 Improper Input Validation	CVE-2011-1982	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

297125	-	microsoft	office	Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a direc…	NVD-CWE-Other	CVE-2011-1980	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

297126	-	microsoft	sharepoint_services sharepoint_foundation sharepoint_server	Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbi…	CWE-79 Cross-site Scripting	CVE-2011-1893	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

297127	-	microsoft	sharepoint_services sharepoint_server groove_server groove sharepoint_workspace groove_data_bridge_server forms_server office_web_apps sharepoint_foundation groove_manageme…	Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Da…	CWE-200 Information Exposure	CVE-2011-1892	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

297128	-	microsoft	sharepoint_services sharepoint_foundation	Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML …	CWE-79 Cross-site Scripting	CVE-2011-1891	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

297129	-	microsoft	sharepoint_foundation sharepoint_server	Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2011-1890	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

297130	-	mark_stosberg	data\	The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-2201	2024-11-21 10:27	2011-09-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed