Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254991	5	警告	日立	-	uCosminexus Portal Framework におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-02-26 11:36	2010-01-29	Show	GitHub Exploit DB Packet Storm

254992	2.6	注意	tDiary開発プロジェクト	-	tDiary 付属のプラグイン tb-send.rb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0726	2010-02-25 15:03	2010-02-25	Show	GitHub Exploit DB Packet Storm

254993	4.3	警告	サン・マイクロシステムズ	-	Sun ONE/iPlanet Web Server における HTTP リクエストを非表示にされる脆弱性	CWE-Other その他	CVE-2003-1578	2010-02-25 12:36	2003-11-14	Show	GitHub Exploit DB Packet Storm

254994	2.6	注意	サン・マイクロシステムズ	-	Sun ONE/iPlanet Web Server におけるログファイルに任意のテキストを挿入される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2003-1577	2010-02-25 12:36	2003-11-14	Show	GitHub Exploit DB Packet Storm

254995	5	警告	IBM	-	IBM WebSphere Application Server の Single Sign-on 機能における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0563	2010-02-25 12:35	2010-02-5	Show	GitHub Exploit DB Packet Storm

254996	5	警告	アップル	-	Apple Safari の WebKit における任意の Web サイトにリクエストされる脆弱性	CWE-Other その他	CVE-2009-2841	2010-02-25 12:33	2009-11-11	Show	GitHub Exploit DB Packet Storm

254997	10	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3384	2010-02-25 12:33	2009-11-11	Show	GitHub Exploit DB Packet Storm

254998	7.1	危険	Linux レッドハット	-	Linux kernel の icmp_send 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-0778	2010-02-25 12:33	2009-03-12	Show	GitHub Exploit DB Packet Storm

254999	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の audit_syscall_entry 関数におけるシステムコール監査設定を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-0834	2010-02-25 12:33	2009-03-6	Show	GitHub Exploit DB Packet Storm

255000	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の hrtimer_start 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2007-5966	2010-02-25 12:31	2007-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268011	7.5	HIGH Network	google	android	Android allows users to cause a denial of service.	NVD-CWE-noinfo	CVE-2016-0833	2024-11-21 11:42	2017-04-21	Show	GitHub Exploit DB Packet Storm

268012	7.8	HIGH Local	canonical	ubuntu_linux	The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on Ubuntu Wily, and before 1:4.2.8p4+dfsg-3…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-0727	2024-11-21 11:42	2017-04-15	Show	GitHub Exploit DB Packet Storm

268013	9.8	CRITICAL Network	apache	tomee	The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object.	CWE-502 Deserialization of Untrusted Data	CVE-2016-0779	2024-11-21 11:42	2017-04-12	Show	GitHub Exploit DB Packet Storm

268014	6.1	MEDIUM Network	zahmit_design	connections_business_directory_plugin	Cross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for WordPress allows remote attackers to inject arbitrary web scr…	CWE-79 Cross-site Scripting	CVE-2016-0770	2024-11-21 11:42	2017-03-17	Show	GitHub Exploit DB Packet Storm

268015	6.1	MEDIUM Network	rsa	web_threat_detection	EMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detection version 5.1.2 has a cross site scripting vulnerability that could potentially be exploited by …	CWE-79 Cross-site Scripting	CVE-2016-0919	2024-11-21 11:42	2017-02-3	Show	GitHub Exploit DB Packet Storm

268016	6.4	MEDIUM Network	emc	powerpath_virtual_appliance	EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 is affected by a sensitive information disclosure vulnerability that may potentially be exploite…	CWE-200 Information Exposure	CVE-2016-0890	2024-11-21 11:42	2017-02-3	Show	GitHub Exploit DB Packet Storm

268017	8.8	HIGH Network	elfden	eshop_plugin	Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execute arbitrary SQL commands via the delid parameter or remote…	CWE-89 SQL Injection	CVE-2016-0769	2024-11-21 11:42	2017-01-24	Show	GitHub Exploit DB Packet Storm

268018	6.1	MEDIUM Network	elfden	eshop_plugin	Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) …	CWE-79 Cross-site Scripting	CVE-2016-0765	2024-11-21 11:42	2017-01-24	Show	GitHub Exploit DB Packet Storm

268019	9.8	CRITICAL Network	mailcwp_project	mailcwp	Mailcwp remote file upload vulnerability incomplete fix v1.100	CWE-77 CWE-284 Command Injection Improper Access Control	CVE-2016-1000156	2024-11-21 11:42	2016-12-15	Show	GitHub Exploit DB Packet Storm

268020	8.4	HIGH Local	emc	avamar_data_store avamar_server_virtual_edition	EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users.	CWE-20 Improper Input Validation	CVE-2016-0909	2024-11-21 11:42	2016-11-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed