Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253931	7.5	危険	日立	-	Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-02-2 11:42	2009-12-22	Show	GitHub Exploit DB Packet Storm

253932	4.3	警告	VMware	-	複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3731	2010-02-1 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

253933	10	危険	サイバートラスト株式会社 Linux	-	Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2008-1673	2010-02-1 11:51	2008-06-10	Show	GitHub Exploit DB Packet Storm

253934	10	危険	ヒューレット・パッカード	-	複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-3027	2010-02-1 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

253935	9.3	危険	KDE project Glyph & Cog, LLC GNOME Project サイバートラスト株式会社レッドハット	-	Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4035	2010-01-29 09:54	2009-12-16	Show	GitHub Exploit DB Packet Storm

253936	7.8	危険	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey の GeckoActiveXObject 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3987	2010-01-29 09:54	2009-12-15	Show	GitHub Exploit DB Packet Storm

253937	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3986	2010-01-29 09:54	2009-12-15	Show	GitHub Exploit DB Packet Storm

253938	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey におけるコンテンツを偽装される脆弱性	CWE-Other その他	CVE-2009-3985	2010-01-29 09:53	2009-12-15	Show	GitHub Exploit DB Packet Storm

253939	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における http URL または file URL の SSL インジケータを偽装される脆弱性	CWE-Other その他	CVE-2009-3984	2010-01-29 09:53	2009-12-15	Show	GitHub Exploit DB Packet Storm

253940	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における認証されたリクエストを任意のアプリケーションに送信される脆弱性	CWE-Other その他	CVE-2009-3983	2010-01-29 09:53	2009-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
288871	-	redcloth debian	redcloth_library debian_linux	Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI.	CWE-79 Cross-site Scripting	CVE-2012-6684	2024-11-21 10:46	2015-01-8	Show	GitHub Exploit DB Packet Storm

288872	-	debian canonical gnu	debian_linux ubuntu_linux glibc	iconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a multibyte character value of "0xffff" to the ico…	CWE-20 Improper Input Validation	CVE-2012-6656	2024-11-21 10:46	2014-12-6	Show	GitHub Exploit DB Packet Storm

288873	-	redhat jqueryui	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node jquery_ui	Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script …	CWE-79 Cross-site Scripting	CVE-2012-6662	2024-11-21 10:46	2014-11-25	Show	GitHub Exploit DB Packet Storm

288874	-	phpmoneybooks	phpmoneybooks	Directory traversal vulnerability in index.php in phpMoneyBooks 1.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, a different vulnerability than CVE-2012…	CWE-22 Path Traversal	CVE-2012-6665	2024-11-21 10:46	2014-11-18	Show	GitHub Exploit DB Packet Storm

288875	-	plone zope	plone zope	Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via …	CWE-310 Cryptographic Issues	CVE-2012-6661	2024-11-21 10:46	2014-11-4	Show	GitHub Exploit DB Packet Storm

288876	-	tp-link	tl-wr841n_firmware tl-wr841n	Multiple cross-site scripting (XSS) vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script…	CWE-79 Cross-site Scripting	CVE-2012-6316	2024-11-21 10:46	2014-09-30	Show	GitHub Exploit DB Packet Storm

288877	-	linux novell	linux_kernel suse_linux_enterprise_server	The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6657	2024-11-21 10:46	2014-09-28	Show	GitHub Exploit DB Packet Storm

288878	-	phorum	phorum	Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2012-6659	2024-11-21 10:46	2014-09-19	Show	GitHub Exploit DB Packet Storm

288879	-	spiceworks	spiceworks	Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName confi…	CWE-79 Cross-site Scripting	CVE-2012-6658	2024-11-21 10:46	2014-09-18	Show	GitHub Exploit DB Packet Storm

288880	-	zpanelcp	zpanel	Multiple SQL injection vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) resetkey or (2) inConfEmail parameter to index.php, a differen…	CWE-89 SQL Injection	CVE-2012-6654	2024-11-21 10:46	2014-08-14	Show	GitHub Exploit DB Packet Storm