Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254891	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

254892	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2712	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

254893	4.3	警告	VMware	-	VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1193	2010-04-21 17:54	2010-03-29	Show	GitHub Exploit DB Packet Storm

254894	7.5	危険	VMware	-	複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0686	2010-04-21 17:53	2010-03-29	Show	GitHub Exploit DB Packet Storm

254895	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1137	2010-04-21 17:51	2010-03-29	Show	GitHub Exploit DB Packet Storm

254896	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4029	2010-04-21 17:51	2009-12-20	Show	GitHub Exploit DB Packet Storm

254897	5	警告	Linux レッドハット	-	Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0741	2010-04-21 17:48	2010-03-30	Show	GitHub Exploit DB Packet Storm

254898	6.9	警告	mielke レッドハット	-	brltty の libbrlttybba.so における権限昇格の脆弱性	CWE-264 CWE-Other	CVE-2008-3279	2010-04-21 17:47	2010-03-30	Show	GitHub Exploit DB Packet Storm

254899	4.3	警告	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0181	2010-04-20 16:42	2010-03-30	Show	GitHub Exploit DB Packet Storm

254900	5.8	警告	サイボウズ	-	複数のサイボウズ製品におけるアクセス制限に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2029	2010-04-20 12:01	2010-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294791	7.4	HIGH Network	polarssl debian fedoraproject	polarssl debian_linux fedora	A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.	CWE-326 Inadequate Encryption Strength	CVE-2012-2130	2024-11-21 10:38	2019-12-7	Show	GitHub Exploit DB Packet Storm

294792	5.9	MEDIUM Network	canonical	ubuntu_cobbler	A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the GPG signature.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2012-2092	2024-11-21 10:38	2019-12-7	Show	GitHub Exploit DB Packet Storm

294793	8.1	HIGH Network	dhclient_project debian	dhclient debian_linux	An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable.	CWE-20 Improper Input Validation	CVE-2012-2248	2024-11-21 10:38	2019-11-28	Show	GitHub Exploit DB Packet Storm

294794	8.8	HIGH Network	drupal	activity	A cross-site request forgery (CSRF) vulnerability in the Activity module 6.x-1.x for Drupal.	CWE-352 Origin Validation Error	CVE-2012-2079	2024-11-21 10:38	2019-11-22	Show	GitHub Exploit DB Packet Storm

294795	4.8	MEDIUM Network	drupal	activity	Cross-site scripting (XSS) vulnerability in the Activity module 6.x-1.x for Drupal.	CWE-79 Cross-site Scripting	CVE-2012-2078	2024-11-21 10:38	2019-11-22	Show	GitHub Exploit DB Packet Storm

294796	7.5	HIGH Network	pam_shield_project debian	pam_shield debian_linux	pam_shield before 0.9.4: Default configuration does not perform protective action	CWE-20 Improper Input Validation	CVE-2012-2350	2024-11-21 10:38	2019-11-21	Show	GitHub Exploit DB Packet Storm

294797	7.5	HIGH Network	tryton	trytond	trytond 2.4: ModelView.button fails to validate authorization	CWE-863 Incorrect Authorization	CVE-2012-2238	2024-11-21 10:38	2019-11-21	Show	GitHub Exploit DB Packet Storm

294798	9.8	CRITICAL Network	ibm	xiv_storage_system_2810-a14_firmware xiv_storage_system_2812-a14_firmware xiv_storage_system_2810-114_firmware xiv_storage_system_2812-114_firmware	IBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and 2812-114 devices before level 11.1.1 have hardcoded passwords for unspecified accounts, which allows remo…	CWE-798 Use of Hard-coded Credentials	CVE-2012-2166	2024-11-21 10:38	2018-02-9	Show	GitHub Exploit DB Packet Storm

294799	-		sgi	xfsprogs	xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.	CWE-200 Information Exposure	CVE-2012-2150	2024-11-21 10:38	2015-08-26	Show	GitHub Exploit DB Packet Storm

294800	-		simple_php_agenda_project	simple_php_agenda	Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an ad…	CWE-352 Origin Validation Error	CVE-2012-1978	2024-11-21 10:38	2015-05-22	Show	GitHub Exploit DB Packet Storm