Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255401	7.8	危険	アップル	-	Apple Mac OS X の Mail における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2010-0525	2010-04-15 18:36	2010-03-29	Show	GitHub Exploit DB Packet Storm

255402	4	警告	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL の mysqld におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2009-4019	2010-04-15 18:16	2009-11-30	Show	GitHub Exploit DB Packet Storm

255403	6.8	警告	The PHP Group アップル	-	PHP の posix_mkfifo 関数における open_basedir の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3558	2010-04-15 18:16	2009-11-23	Show	GitHub Exploit DB Packet Storm

255404	4.4	警告	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL における権限チェックを回避される脆弱性	CWE-59 リンク解釈の問題	CVE-2009-4030	2010-04-15 18:16	2009-11-5	Show	GitHub Exploit DB Packet Storm

255405	2.6	注意	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL のコマンドラインクライアントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4456	2010-04-15 18:15	2008-10-6	Show	GitHub Exploit DB Packet Storm

255406	10	危険	アップル	-	Apple Mac OS X の Mail における脆弱性	CWE-noinfo 情報不足	CVE-2010-0508	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

255407	6.8	警告	アップル	-	Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0507	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

255408	6.8	警告	アップル	-	Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0506	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

255409	6.8	警告	アップル	-	Apple Mac OS X の ImageIO における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0505	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

255410	7.5	危険	アップル	-	Apple Mac OS X の iChat サーバにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0504	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
289931	-	sophos	web_appliance_firmware web_appliance	Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via shell metacharacters in the client-ip parameter to the Block page, when using the user_workstation va…	CWE-78 OS Command	CVE-2013-2642	2024-11-21 10:52	2014-03-19	Show	GitHub Exploit DB Packet Storm

289932	-	sophos	web_appliance_firmware web_appliance	Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.	CWE-22 Path Traversal	CVE-2013-2641	2024-11-21 10:52	2014-03-19	Show	GitHub Exploit DB Packet Storm

289933	-	aspen	aspen	Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot) to the default URI.	CWE-22 Path Traversal	CVE-2013-2619	2024-11-21 10:52	2014-03-19	Show	GitHub Exploit DB Packet Storm

289934	-	brother	mfc-9970cdw_firmware mfc-9970cdw	Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) val p…	CWE-79 Cross-site Scripting	CVE-2013-2671	2024-11-21 10:52	2014-03-14	Show	GitHub Exploit DB Packet Storm

289935	-	brother	mfc-9970cdw_firmware mfc-9970cdw	Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to inject arbitrary web script or HTML via an arbitrary paramet…	CWE-79 Cross-site Scripting	CVE-2013-2670	2024-11-21 10:52	2014-03-14	Show	GitHub Exploit DB Packet Storm

289936	-	umi-cms	umi.cms	Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator ac…	CWE-352 Origin Validation Error	CVE-2013-2754	2024-11-21 10:52	2014-03-12	Show	GitHub Exploit DB Packet Storm

289937	-	schneider-electric	powerlogic_scada struxureware_scada_expert_vijeo_citect struxureware_powerscada_expert citectscada	Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogi…	NVD-CWE-Other	CVE-2013-2824	2024-11-21 10:52	2014-02-26	Show	GitHub Exploit DB Packet Storm

289938	-	mitsubishielectric	mc-worx_suite	An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction…	CWE-94 Code Injection	CVE-2013-2817	2024-11-21 10:52	2014-02-24	Show	GitHub Exploit DB Packet Storm

289939	-	matrikonopc	scada_dnp3_opc_server	MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed DNP3 packet.	CWE-20 Improper Input Validation	CVE-2013-2829	2024-11-21 10:52	2014-02-14	Show	GitHub Exploit DB Packet Storm

289940	-	atmail	atmail	Cross-site scripting (XSS) vulnerability in Atmail Webmail Server 6.6.x before 6.6.3 and 7.0.x before 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.p…	CWE-79 Cross-site Scripting	CVE-2013-2585	2024-11-21 10:52	2014-02-13	Show	GitHub Exploit DB Packet Storm