Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254601	10	危険	ヒューレット・パッカード SGI IBM	-	rpc.pcnfsd の _msgout 関数における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1039	2010-07-8 18:03	2010-05-18	Show	GitHub Exploit DB Packet Storm

254602	1.2	注意	IBM OpenBSD	-	OpenSSH における X11 転送ポートをハイジャックされる脆弱性	CWE-200 情報漏えい	CVE-2008-3259	2010-07-7 16:40	2008-07-22	Show	GitHub Exploit DB Packet Storm

254603	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるユーザインターフェースを偽装される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1581	2010-07-6 19:19	2009-05-12	Show	GitHub Exploit DB Packet Storm

254604	6.8	警告	アップル SquirrelMail Project	-	SquirrelMail におけるセッション固定の脆弱性	CWE-287 不適切な認証	CVE-2009-1580	2010-07-6 19:18	2009-05-11	Show	GitHub Exploit DB Packet Storm

254605	6.8	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-1579	2010-07-6 19:18	2009-05-10	Show	GitHub Exploit DB Packet Storm

254606	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1578	2010-07-6 19:18	2009-05-8	Show	GitHub Exploit DB Packet Storm

254607	8.5	危険	マイクロソフト	-	Microsoft IIS における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1256	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

254608	4	警告	マイクロソフト	-	Microsoft Windows SharePoint Services におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1264	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

254609	6.9	警告	マイクロソフト	-	Open XML File Format Converter のインストールにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1254	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

254610	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Excel ファイルにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1252	2010-07-5 17:51	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
289551	-	fenrir-inc	sleipnir_mobile	The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger down…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2304	2024-11-21 10:51	2013-04-16	Show	GitHub Exploit DB Packet Storm

289552	-	fenrir-inc	sleipnir	Sleipnir 4.0.0.4000 and earlier on Windows allows remote attackers to spoof the SSL lock icon and address-bar colors via unspecified vectors.	NVD-CWE-noinfo	CVE-2013-2303	2024-11-21 10:51	2013-04-16	Show	GitHub Exploit DB Packet Storm

289553	-	transware	active\!_mail	TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information belonging to arbitrary users by leveraging shell access, as demonstrated by a T…	CWE-200 Information Exposure	CVE-2013-2302	2024-11-21 10:51	2013-04-5	Show	GitHub Exploit DB Packet Storm

289554	-	omron	openwnn	The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local f…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2301	2024-11-21 10:51	2013-03-30	Show	GitHub Exploit DB Packet Storm

289555	-	asterisk	open_source certified_asterisk business_edition digiumphones	The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x …	CWE-200 Information Exposure	CVE-2013-2264	2024-11-21 10:51	2013-04-2	Show	GitHub Exploit DB Packet Storm

289556	-	arubanetworks	arubaos	Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, a…	CWE-79 Cross-site Scripting	CVE-2013-2290	2024-11-21 10:51	2013-03-29	Show	GitHub Exploit DB Packet Storm

289557	-	isc	dhcp	libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustio…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2494	2024-11-21 10:51	2013-03-29	Show	GitHub Exploit DB Packet Storm

289558	-	isc	bind	libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memor…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2266	2024-11-21 10:51	2013-03-29	Show	GitHub Exploit DB Packet Storm

289559	-	pm9	flickwnn	The FlickWnn (aka OpenWnn/Flick support) application 2.02 and earlier for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an applicatio…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2300	2024-11-21 10:51	2013-03-28	Show	GitHub Exploit DB Packet Storm

289560	-	terillion	terillion_reviews_plugin	Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field.	CWE-79 Cross-site Scripting	CVE-2013-2501	2024-11-21 10:51	2013-03-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed