Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255321	7.5	危険	レッドハット	-	Red Hat JBoss Enterprise Application Platform および JBoss Enterprise SOA Platform の JBoss Drools における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3708	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

255322	4	警告	レッドハット	-	Red Hat Enterprise MRG の lib/MessageStoreImpl.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3701	2012-03-27 18:42	2010-10-7	Show	GitHub Exploit DB Packet Storm

255323	5	警告	VMware IBM acegisecurity	-	VMware SpringSource Spring Security および IBM WAS で使用される Acegi Security におけるセキュリティ制約条件を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3700	2012-03-27 18:42	2010-10-27	Show	GitHub Exploit DB Packet Storm

255324	4.3	警告	FreeRADIUS	-	FreeRADIUS の wait_for_child_to_die 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3697	2012-03-27 18:42	2010-09-28	Show	GitHub Exploit DB Packet Storm

255325	4.3	警告	FreeRADIUS	-	FreeRADIUS の fr_dhcp_decode 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3696	2012-03-27 18:42	2010-09-28	Show	GitHub Exploit DB Packet Storm

255326	4.3	警告	Horde	-	Horde IMP および Horde Groupware Webmail Edition の fetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3695	2012-03-27 18:42	2011-03-31	Show	GitHub Exploit DB Packet Storm

255327	4.3	警告	Horde	-	Horde DIMP および Horde Groupware Webmail Edition におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3693	2012-03-27 18:42	2011-04-4	Show	GitHub Exploit DB Packet Storm

255328	6.8	警告	Horde	-	Horde Application Framework におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3694	2012-03-27 18:42	2010-11-9	Show	GitHub Exploit DB Packet Storm

255329	6.4	警告	Jasig	-	phpCAS の callback 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3692	2012-03-27 18:42	2010-10-7	Show	GitHub Exploit DB Packet Storm

255330	3.3	注意	Jasig	-	phpCAS の PGTStorage/pgt-file.php における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-3691	2012-03-27 18:42	2010-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247551	5.5	MEDIUM Local	agilebits	1password	An issue was discovered in 1Password 7.2.3.BETA before 7.2.3.BETA-3 on macOS. A mistake in error logging resulted in instances where sensitive data passed from Safari to 1Password could be logged loc…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2018-19863	2024-11-21 12:58	2018-12-23	Show	GitHub Exploit DB Packet Storm

247552	4.8	MEDIUM Network	statamic	statamic	Statamic 2.10.3 allows XSS via First Name or Last Name to the /users URI in an 'Add new user' request.	CWE-79 Cross-site Scripting	CVE-2018-19598	2024-11-21 12:58	2018-12-20	Show	GitHub Exploit DB Packet Storm

247553	4.8	MEDIUM Network	cmsmadesimple	cms_made_simple	CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798.	CWE-79 Cross-site Scripting	CVE-2018-19597	2024-11-21 12:58	2018-12-20	Show	GitHub Exploit DB Packet Storm

247554	4.8	MEDIUM Network	zurmo	zurmo	Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.	CWE-79 Cross-site Scripting	CVE-2018-19596	2024-11-21 12:58	2018-12-20	Show	GitHub Exploit DB Packet Storm

247555	4.8	MEDIUM Network	cmsimple	cmsimple	CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI.	CWE-79 Cross-site Scripting	CVE-2018-19508	2024-11-21 12:58	2018-12-20	Show	GitHub Exploit DB Packet Storm

247556	4.8	MEDIUM Network	cmsimple	cmsimple	CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI.	CWE-79 Cross-site Scripting	CVE-2018-19507	2024-11-21 12:58	2018-12-20	Show	GitHub Exploit DB Packet Storm

247557	4.8	MEDIUM Network	zurmo	zurmo	Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI.	CWE-79 Cross-site Scripting	CVE-2018-19506	2024-11-21 12:58	2018-12-20	Show	GitHub Exploit DB Packet Storm

247558	6.5	MEDIUM Network	artica	integria_ims	Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known.	CWE-352 Origin Validation Error	CVE-2018-19829	2024-11-21 12:58	2018-12-19	Show	GitHub Exploit DB Packet Storm

247559	6.1	MEDIUM Network	sensiolabs fedoraproject debian	symfony fedora debian_linux	An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_f…	CWE-601 Open Redirect	CVE-2018-19790	2024-11-21 12:58	2018-12-19	Show	GitHub Exploit DB Packet Storm

247560	5.3	MEDIUM Network	sensiolabs debian	symfony debian_linux	An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1. When using the scalar type hint `strin…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-19789	2024-11-21 12:58	2018-12-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed