Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253901	6.9	警告	マイクロソフト	-	Microsoft Windows Movie Maker における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3967	2011-01-14 15:36	2010-12-14	Show	GitHub Exploit DB Packet Storm

253902	7.2	危険	マイクロソフト	-	Microsoft Windows の Windows Task Scheduler における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3338	2011-01-14 15:31	2010-12-14	Show	GitHub Exploit DB Packet Storm

253903	6.9	警告	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-94 コード・インジェクション	CVE-2010-3959	2011-01-14 15:27	2010-12-14	Show	GitHub Exploit DB Packet Storm

253904	5	警告	アップルサイバートラスト株式会社 OpenLDAP Foundation ターボリナックス VMware レッドハット	-	OpenLDAP の IA5StringNormalize 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0212	2011-01-14 14:45	2010-06-30	Show	GitHub Exploit DB Packet Storm

253905	5	警告	アップルサイバートラスト株式会社 OpenLDAP Foundation ターボリナックス VMware レッドハット	-	OpenLDAP の slap_modrdn2mods 関数における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0211	2011-01-14 14:45	2010-06-30	Show	GitHub Exploit DB Packet Storm

253906	6.2	警告	サイバートラスト株式会社 VMware Todd C. Miller レッドハット	-	sudo における権限昇格の脆弱性	CWE-DesignError	CVE-2010-2956	2011-01-14 14:44	2010-09-7	Show	GitHub Exploit DB Packet Storm

253907	-	-	GNU Project VMware サイバートラスト株式会社レッドハット	-	glibc に権限昇格の脆弱性	-	CVE-2010-3847	2011-01-14 14:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

253908	7.8	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における終端文字列の処理に関する重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-2495	2011-01-14 14:33	2009-07-28	Show	GitHub Exploit DB Packet Storm

253909	9.3	危険	サン・マイクロシステムズアドビシステムズ日本電気マイクロソフト OpenOffice.org Project	-	Microsoft Visual Studio の ATL におけるオブジェクトのインスタンス化処理に関する任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2493	2011-01-14 14:32	2009-07-28	Show	GitHub Exploit DB Packet Storm

253910	9.3	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における未初期化オブジェクト処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-0901	2011-01-14 14:31	2009-07-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
302601	5.9	MEDIUM Network	debian offlineimap	debian_linux offlineimap	offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.	CWE-295 Improper Certificate Validation	CVE-2010-4532	2024-11-21 10:21	2019-11-14	Show	GitHub Exploit DB Packet Storm

302602	-		ghostscript	ghostscript	Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working direc…	CWE-94 Code Injection	CVE-2010-4820	2024-11-21 10:21	2014-10-27	Show	GitHub Exploit DB Packet Storm

302603	-		google	android	Android OS before 2.2 does not display the correct SSL certificate in certain cases, which might allow remote attackers to spoof trusted web sites via a web page containing references to external sou…	CWE-310 Cryptographic Issues	CVE-2010-4832	2024-11-21 10:21	2014-05-14	Show	GitHub Exploit DB Packet Storm

302604	-		perl	perl	The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (ass…	CWE-20 Improper Input Validation	CVE-2010-4777	2024-11-21 10:21	2014-02-11	Show	GitHub Exploit DB Packet Storm

302605	-		phpmyfaq	phpmyfaq	Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.	CWE-79 Cross-site Scripting	CVE-2010-4821	2024-11-21 10:21	2012-10-23	Show	GitHub Exploit DB Packet Storm

302606	-		silverstripe	silverstripe	SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remo…	CWE-89 SQL Injection	CVE-2010-4824	2024-11-21 10:21	2012-09-18	Show	GitHub Exploit DB Packet Storm

302607	-		silverstripe	silverstripe	Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when custom error handling is …	CWE-79 Cross-site Scripting	CVE-2010-4823	2024-11-21 10:21	2012-09-18	Show	GitHub Exploit DB Packet Storm

302608	-		silverstripe	silverstripe	core/model/MySQLDatabase.php in SilverStripe 2.4.x before 2.4.4, when the site is running in "live mode," allows remote attackers to obtain the SQL queries for a page via the showqueries and ajax par…	CWE-200 Information Exposure	CVE-2010-4822	2024-11-21 10:21	2012-09-18	Show	GitHub Exploit DB Packet Storm

302609	-		x	x.org-xserver	The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (serve…	CWE-20 Improper Input Validation	CVE-2010-4819	2024-11-21 10:21	2012-09-6	Show	GitHub Exploit DB Packet Storm

302610	-		x.org	x.org	The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via (1) a crafted request that triggers a cl…	CWE-20 Improper Input Validation	CVE-2010-4818	2024-11-21 10:21	2012-09-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed