Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253691	5	警告	アップル ClamAV	-	ClamAV の libclamav/mspack.c における qtm_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1311	2010-09-8 15:52	2010-04-8	Show	GitHub Exploit DB Packet Storm

253692	5	警告	アップル	-	Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1800	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

253693	6.8	警告	アップル	-	Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1808	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

253694	6.2	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo の secure path 機能における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1646	2010-09-8 15:50	2010-06-7	Show	GitHub Exploit DB Packet Storm

253695	6.9	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1163	2010-09-8 15:50	2010-04-16	Show	GitHub Exploit DB Packet Storm

253696	10	危険	ESET アップル ClamAV ソースネクスト	-	複数のアンチウィルス製品に脆弱性	CWE-noinfo 情報不足	CVE-2010-0098	2010-09-8 15:50	2010-04-13	Show	GitHub Exploit DB Packet Storm

253697	7.5	危険	The PHP Group アップル	-	PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1129	2010-09-8 15:49	2010-03-26	Show	GitHub Exploit DB Packet Storm

253698	4.4	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0427	2010-09-8 15:49	2010-02-25	Show	GitHub Exploit DB Packet Storm

253699	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2784	2010-09-7 15:51	2010-08-19	Show	GitHub Exploit DB Packet Storm

253700	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0431	2010-09-7 15:50	2010-08-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276571	-	mini-stream	rm-mp3_converter	Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long string in a WAX file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-9448	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

276572	-	elfutils_project	elfutils	Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (…	CWE-22 Path Traversal	CVE-2014-9447	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

276573	-	koha	koha	Multiple cross-site scripting (XSS) vulnerabilities in the Staff client in Koha before 3.16.6 and 3.18.x before 3.18.2 allow remote attackers to inject arbitrary web script or HTML via the sort_by pa…	CWE-79 Cross-site Scripting	CVE-2014-9446	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

276574	-	installatron	gatequest_file_manager	SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to execute arbitrary SQL commands via the create parameter to index.php. NOTE: this c…	CWE-89 SQL Injection	CVE-2014-9445	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

276575	-	frontend_uploader_project	frontend_uploader	Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the errors[fu-disallowed-mime-type][0][…	CWE-79 Cross-site Scripting	CVE-2014-9444	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

276576	-	relevanssi	relevanssi	Cross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2014-9443	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

276577	-	reality66	cart66_lite	SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the q parameter in a …	CWE-89 SQL Injection	CVE-2014-9442	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

276578	-	lightbox_photo_gallery_project	lightbox_photo_gallery	Multiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests th…	CWE-352 Origin Validation Error	CVE-2014-9441	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

276579	-	phpmyrecipes_project	phpmyrecipes	SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter.	CWE-89 SQL Injection	CVE-2014-9440	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

276580	-	efssoft	easy_file_sharing_web_server	Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary web script or HTML via the username field during registration, which is not pr…	CWE-79 Cross-site Scripting	CVE-2014-9439	2024-11-21 11:20	2015-01-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed