Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255641 7.2 危険 Apache Software Foundation - Apache mod_fcgid の apr_status_t fcgid_header_bucket_read 関数における脆弱性 CWE-189
数値処理の問題
CVE-2010-3872 2011-06-9 10:22 2010-06-8 Show GitHub Exploit DB Packet Storm
255642 4.3 警告 Apache Software Foundation - Apache Struts における複数のクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6682 2011-06-9 10:21 2009-04-9 Show GitHub Exploit DB Packet Storm
255643 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2025 2011-06-9 10:20 2009-04-9 Show GitHub Exploit DB Packet Storm
255644 4.3 警告 Stichting NLnet Labs - Unbound DNS リゾルバにサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1922 2011-06-8 11:55 2011-05-26 Show GitHub Exploit DB Packet Storm
255645 7.8 危険 ERLANG - Erlang/OTP SSH ライブラリで生成される乱数が推測可能な問題 CWE-310
暗号の問題
CVE-2011-0766 2011-06-8 11:54 2011-05-26 Show GitHub Exploit DB Packet Storm
255646 10 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2010-3415 2011-06-8 11:52 2010-09-14 Show GitHub Exploit DB Packet Storm
255647 10 危険 Google - Mac OS X 上で稼働する Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2010-3414 2011-06-8 11:52 2010-09-14 Show GitHub Exploit DB Packet Storm
255648 5 警告 Google - Google Chrome のポップアップブロック機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-3413 2011-06-8 11:51 2010-09-14 Show GitHub Exploit DB Packet Storm
255649 9.3 危険 Google - Google Chrome のコンソール実装における競合状態の脆弱性 CWE-362
競合状態
CVE-2010-3412 2011-06-8 11:51 2010-09-14 Show GitHub Exploit DB Packet Storm
255650 5 警告 Google - Linux 上で稼働する Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-3411 2011-06-8 11:50 2010-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298061 - plone
zope
plone
zope
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via … CWE-310
Cryptographic Issues
CVE-2012-6661 2024-11-21 10:46 2014-11-4 Show GitHub Exploit DB Packet Storm
298062 - tp-link tl-wr841n_firmware
tl-wr841n
Multiple cross-site scripting (XSS) vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script… CWE-79
Cross-site Scripting
CVE-2012-6316 2024-11-21 10:46 2014-09-30 Show GitHub Exploit DB Packet Storm
298063 - linux
novell
linux_kernel
suse_linux_enterprise_server
The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6657 2024-11-21 10:46 2014-09-28 Show GitHub Exploit DB Packet Storm
298064 - phorum phorum Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting
CVE-2012-6659 2024-11-21 10:46 2014-09-19 Show GitHub Exploit DB Packet Storm
298065 - spiceworks spiceworks Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName confi… CWE-79
Cross-site Scripting
CVE-2012-6658 2024-11-21 10:46 2014-09-18 Show GitHub Exploit DB Packet Storm
298066 - zpanelcp zpanel Multiple SQL injection vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) resetkey or (2) inConfEmail parameter to index.php, a differen… CWE-89
SQL Injection
CVE-2012-6654 2024-11-21 10:46 2014-08-14 Show GitHub Exploit DB Packet Storm
298067 - all_video_gallery_plugin_project all_video_gallery_plugin Unspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for WordPress has unspecified impact and attack vectors. NVD-CWE-noinfo
CVE-2012-6653 2024-11-21 10:46 2014-08-7 Show GitHub Exploit DB Packet Storm
298068 - vitamin_plugin_project vitamin Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary files via a .. (dot dot) in the path parameter to (1) add_head… CWE-22
Path Traversal
CVE-2012-6651 2024-11-21 10:46 2014-07-31 Show GitHub Exploit DB Packet Storm
298069 - axway email_firewall
secure_messenger
Axway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides different responses to authentication requests depending on whether the user exists, which allows remote… CWE-287
Improper Authentication
CVE-2012-6452 2024-11-21 10:46 2014-05-27 Show GitHub Exploit DB Packet Storm
298070 - linux linux_kernel The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of serv… CWE-20
 Improper Input Validation 
CVE-2012-6647 2024-11-21 10:46 2014-05-27 Show GitHub Exploit DB Packet Storm