Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256101	4.3	警告	アップル	-	Apple Safari の WebKit におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1391	2010-07-13 16:38	2010-06-10	Show	GitHub Exploit DB Packet Storm

256102	4.3	警告	アップル	-	Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1390	2010-07-13 16:37	2010-06-10	Show	GitHub Exploit DB Packet Storm

256103	4.3	警告	アップル	-	Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1389	2010-07-13 16:36	2010-06-10	Show	GitHub Exploit DB Packet Storm

256104	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0054	2010-07-13 16:36	2010-03-15	Show	GitHub Exploit DB Packet Storm

256105	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0053	2010-07-13 16:35	2010-03-15	Show	GitHub Exploit DB Packet Storm

256106	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0052	2010-07-13 16:35	2010-03-15	Show	GitHub Exploit DB Packet Storm

256107	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0050	2010-07-13 16:34	2010-03-15	Show	GitHub Exploit DB Packet Storm

256108	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0049	2010-07-13 16:33	2010-03-15	Show	GitHub Exploit DB Packet Storm

256109	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0048	2010-07-13 16:33	2010-03-15	Show	GitHub Exploit DB Packet Storm

256110	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0047	2010-07-13 16:31	2010-03-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
302241	6.1	MEDIUM Network	vanillaforums	vanilla	Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter.	CWE-79 Cross-site Scripting	CVE-2011-1009	2024-11-21 10:25	2020-02-6	Show	GitHub Exploit DB Packet Storm

302242	9.8	CRITICAL Network	smarty debian	smarty debian_linux	The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.	CWE-20 Improper Input Validation	CVE-2011-1028	2024-11-21 10:25	2019-11-21	Show	GitHub Exploit DB Packet Storm

302243	7.8	HIGH Local	unixodbc debian opensuse redhat	unixodbc debian_linux opensuse enterprise_linux	The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.	CWE-120 Classic Buffer Overflow	CVE-2011-1145	2024-11-21 10:25	2019-11-14	Show	GitHub Exploit DB Packet Storm

302244	4.7	MEDIUM Local	tesseract_project debian	tesseract debian_linux	In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.	CWE-59 Link Following	CVE-2011-1136	2024-11-21 10:25	2019-11-14	Show	GitHub Exploit DB Packet Storm

302245	7.8	HIGH Local	v86d_project debian	v86d debian_linux	v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.	CWE-863 Incorrect Authorization	CVE-2011-1070	2024-11-21 10:25	2019-11-14	Show	GitHub Exploit DB Packet Storm

302246	6.1	MEDIUM Network	s9y	serendipity	Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/Imag…	CWE-79 Cross-site Scripting	CVE-2011-1135	2024-11-21 10:25	2019-11-6	Show	GitHub Exploit DB Packet Storm

302247	9.8	CRITICAL Network	s9y	serendipity	Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2011-1134	2024-11-21 10:25	2019-11-6	Show	GitHub Exploit DB Packet Storm

302248	6.1	MEDIUM Network	s9y	serendipity	Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php.	CWE-79 Cross-site Scripting	CVE-2011-1133	2024-11-21 10:25	2019-11-6	Show	GitHub Exploit DB Packet Storm

302249	-		novell	suse_lifecycle_management_server	SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-0993	2024-11-21 10:25	2014-04-17	Show	GitHub Exploit DB Packet Storm

302250	-		xen	xen	Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution without user-mode pagetables.	CWE-20 Improper Input Validation	CVE-2011-1166	2024-11-21 10:25	2014-01-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed