Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256341 10 危険 シスコシステムズ - Cisco IOS の SIP 実装における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-0580 2010-04-8 10:41 2010-03-24 Show GitHub Exploit DB Packet Storm
256342 4.3 警告 マイクロソフト - Internet Explorer における情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2010-0488 2010-04-7 15:02 2010-04-7 Show GitHub Exploit DB Packet Storm
256343 7.8 危険 シスコシステムズ - Cisco IOS における SCCP メッセージの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0586 2010-04-7 14:50 2010-03-24 Show GitHub Exploit DB Packet Storm
256344 7.8 危険 シスコシステムズ - Cisco IOS における SCCP メッセージの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0585 2010-04-7 14:50 2010-03-24 Show GitHub Exploit DB Packet Storm
256345 7.1 危険 シスコシステムズ - Cisco IOS における TCP セグメントの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0577 2010-04-7 14:50 2010-03-24 Show GitHub Exploit DB Packet Storm
256346 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0167 2010-04-7 14:50 2010-03-23 Show GitHub Exploit DB Packet Storm
256347 5.1 警告 Mozilla Foundation - Mac OS X 上で稼働する Mozilla Firefox の gfxTextRun::SanitizeGlyphRuns 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0166 2010-04-7 14:49 2010-03-23 Show GitHub Exploit DB Packet Storm
256348 9.3 危険 Mozilla Foundation - Mozilla Firefox の TraceRecorder::traverseScopeChain 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0165 2010-04-7 14:49 2010-03-23 Show GitHub Exploit DB Packet Storm
256349 4.3 警告 Mozilla Foundation - Mozilla Firefox の非同期認証プロンプト実装における信頼できる認証ダイアログになりすまされる脆弱性 CWE-Other
その他
CVE-2010-0172 2010-04-6 16:50 2010-03-23 Show GitHub Exploit DB Packet Storm
256350 5 警告 Mozilla Foundation
レッドハット
- 複数の Mozilla 製品の CSSLoaderImpl::DoSheetComplete 関数におけるウェブページのレンダリングを中断される脆弱性 CWE-Other
その他
CVE-2010-0169 2010-04-6 16:50 2010-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255771 6.1 MEDIUM
Network
apache sling_xss_protection_api
sling_xss_protection_api_compat
A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special crafted URLs to pass as … CWE-79
Cross-site Scripting
CVE-2017-15717 2024-11-21 12:15 2018-01-10 Show GitHub Exploit DB Packet Storm
255772 9.8 CRITICAL
Network
progress sitefinity Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via ve… CWE-287
Improper Authentication
CVE-2017-15883 2024-11-21 12:15 2018-01-9 Show GitHub Exploit DB Packet Storm
255773 7.8 HIGH
Local
navercorp whale The Installer in Whale allows DLL hijacking. CWE-426
 Untrusted Search Path
CVE-2017-15913 2024-11-21 12:15 2018-01-8 Show GitHub Exploit DB Packet Storm
255774 9.8 CRITICAL
Network
apache ofbiz The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code injection by passing that code through the URL. For example by appending this cod… CWE-74
Injection
CVE-2017-15714 2024-11-21 12:15 2018-01-5 Show GitHub Exploit DB Packet Storm
255775 5.4 MEDIUM
Network
synology chat Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND… CWE-79
Cross-site Scripting
CVE-2017-15892 2024-11-21 12:15 2017-12-29 Show GitHub Exploit DB Packet Storm
255776 6.5 MEDIUM
Network
synology chat Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary local files via a crafted URI. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2017-15886 2024-11-21 12:15 2017-12-29 Show GitHub Exploit DB Packet Storm
255777 9.8 CRITICAL
Network
sistemagpweb gpweb Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2017-15877 2024-11-21 12:15 2017-12-19 Show GitHub Exploit DB Packet Storm
255778 7.2 HIGH
Network
sistemagpweb gpweb Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2017-15876 2024-11-21 12:15 2017-12-19 Show GitHub Exploit DB Packet Storm
255779 9.8 CRITICAL
Network
sistemagpweb gpweb SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter. CWE-89
SQL Injection
CVE-2017-15875 2024-11-21 12:15 2017-12-19 Show GitHub Exploit DB Packet Storm
255780 8.8 HIGH
Network
apache sling_authentication_service A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over … CWE-200
Information Exposure
CVE-2017-15700 2024-11-21 12:15 2017-12-19 Show GitHub Exploit DB Packet Storm