Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254961	4.4	警告	アップルサイバートラスト株式会社 Carnegie Mellon University (Project Cyrus) レッドハット	-	Cyrus IMAPd にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2632	2010-04-13 14:46	2009-09-10	Show	GitHub Exploit DB Packet Storm

254962	7.5	危険	Haxx アップルサイバートラスト株式会社レッドハット	-	cURL および libcurl における、任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2417	2010-04-13 14:46	2009-08-12	Show	GitHub Exploit DB Packet Storm

254963	6.8	警告	Haxx アップルサイバートラスト株式会社レッドハット	-	curl および libcurl の redirect 実装における任意のコマンドを実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-0037	2010-04-13 14:45	2009-03-3	Show	GitHub Exploit DB Packet Storm

254964	9.3	危険	ジャストシステム	-	一太郎シリーズにおける任意のコードが実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1424	2010-04-12 15:32	2010-04-12	Show	GitHub Exploit DB Packet Storm

254965	4.4	警告	ヒューレット・パッカード	-	HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1030	2010-04-12 12:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

254966	10	危険	IntelliCom Innovation AB	-	IntelliCom NetBiter Config HICP におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4462	2010-04-12 12:19	2010-03-29	Show	GitHub Exploit DB Packet Storm

254967	7.5	危険	The PHP Group	-	PHP のセッション拡張子における open_basedir または safe_mode 制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1130	2010-04-12 12:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

254968	4.3	警告	Zope Foundation	-	Zope におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1104	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

254969	4	警告	ヒューレット・パッカード	-	HP HP-UX の NFS/ONCplus にあるインストールプロセスにおけるファイルシステムのアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0451	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

254970	7.5	危険	GNU Project サイバートラスト株式会社レッドハット	-	GnuTLS の gnutls_x509_crt_get_serial 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0731	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
300221	-	webempoweredchurch	wec_discussion	Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors,…	CWE-89 SQL Injection	CVE-2011-1722	2024-11-21 10:26	2011-04-20	Show	GitHub Exploit DB Packet Storm

300222	-	obspm	webjaxe	Cross-site request forgery (CSRF) vulnerability in php/partie_administrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests tha…	CWE-352 Origin Validation Error	CVE-2011-1721	2024-11-21 10:26	2011-04-20	Show	GitHub Exploit DB Packet Storm

300223	-	skype	skype_for_android	Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of bir…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-1717	2024-11-21 10:26	2011-04-19	Show	GitHub Exploit DB Packet Storm

300224	-	xymon	xymon	Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2011-1716	2024-11-21 10:26	2011-04-19	Show	GitHub Exploit DB Packet Storm

300225	-	qooxdoo	qooxdoo	Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remo…	CWE-22 Path Traversal	CVE-2011-1715	2024-11-21 10:26	2011-04-19	Show	GitHub Exploit DB Packet Storm

300226	-	qooxdoo	qooxdoo	Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products…	CWE-79 Cross-site Scripting	CVE-2011-1714	2024-11-21 10:26	2011-04-19	Show	GitHub Exploit DB Packet Storm

300227	-	otrs	otrs	Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via uns…	CWE-79 Cross-site Scripting	CVE-2011-1518	2024-11-21 10:26	2011-04-19	Show	GitHub Exploit DB Packet Storm

300228	-	nicholas_marriott	tmux	tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-1496	2024-11-21 10:26	2011-04-19	Show	GitHub Exploit DB Packet Storm

300229	-	realnetworks	realplayer realplayer_sp	The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified i…	NVD-CWE-Other	CVE-2011-1426	2024-11-21 10:26	2011-04-19	Show	GitHub Exploit DB Packet Storm

300230	-	broadcom	total_defense	The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSetti…	CWE-310 Cryptographic Issues	CVE-2011-1655	2024-11-21 10:26	2011-04-19	Show	GitHub Exploit DB Packet Storm