Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255171 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255172 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255173 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
255174 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
255175 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
303791 - quicksketch filefield Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and 'Path to F… CWE-79
Cross-site Scripting 		CVE-2010-1958 2024-11-21 10:15 2010-06-22 Show GitHub Exploit DB Packet Storm
303792 - apache http_server mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, … CWE-200
Information Exposure 		CVE-2010-2068 2024-11-21 10:15 2010-06-19 Show GitHub Exploit DB Packet Storm
303793 - apple itunes WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execut… NVD-CWE-noinfo
CVE-2010-1769 2024-11-21 10:15 2010-06-19 Show GitHub Exploit DB Packet Storm
303794 - apple itunes Unspecified vulnerability in WebKit in Apple iTunes before 9.2 on Windows has unknown impact and attack vectors, a different vulnerability than CVE-2010-1387 and CVE-2010-1769. NVD-CWE-noinfo
CVE-2010-1763 2024-11-21 10:15 2010-06-19 Show GitHub Exploit DB Packet Storm
303795 - samba
canonical
debian 		samba
ubuntu_linux
debian_linux 		Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-2063 2024-11-21 10:15 2010-06-18 Show GitHub Exploit DB Packet Storm
303796 - hp openview_network_node_manager Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified parameters to jovgraph.exe, aka ZDI-CA… NVD-CWE-noinfo
CVE-2010-1964 2024-11-21 10:15 2010-06-18 Show GitHub Exploit DB Packet Storm
303797 - apple cups The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly ha… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1748 2024-11-21 10:15 2010-06-18 Show GitHub Exploit DB Packet Storm
303798 - w3m w3m istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alter… CWE-20
 Improper Input Validation  		CVE-2010-2074 2024-11-21 10:15 2010-06-17 Show GitHub Exploit DB Packet Storm
303799 7.5 HIGH
Network 		debian pyftpd auth_db_config.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the (1) test, (2) user, and (3) roxon accounts, which allows remote attackers to read arbitrary files from the FTP se… CWE-798
 Use of Hard-coded Credentials 		CVE-2010-2073 2024-11-21 10:15 2010-06-17 Show GitHub Exploit DB Packet Storm
303800 - radovan_garabik pyftpd Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information. CWE-310
Cryptographic Issues 		CVE-2010-2072 2024-11-21 10:15 2010-06-17 Show GitHub Exploit DB Packet Storm