Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257241 7.5 危険 Linux
レッドハット		 - Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
257242 7.8 危険 Linux
レッドハット		 - Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
257243 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4248 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257244 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4246 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257245 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer の smlrender.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4257 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257246 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4245 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257247 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4244 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257248 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-0376 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
257249 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0375 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
257250 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における HTTP のチャンク転送コーディングの処理に関する脆弱性 CWE-119
バッファエラー 		CVE-2009-4243 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
308801 - taskfreak taskfreak\! Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter. CWE-79
Cross-site Scripting 		CVE-2010-1520 2024-11-21 10:14 2010-07-1 Show GitHub Exploit DB Packet Storm
308802 - adobe acrobat
acrobat_reader 		Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vec… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1295 2024-11-21 10:14 2010-07-1 Show GitHub Exploit DB Packet Storm
308803 - adobe acrobat
acrobat_reader 		Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator… CWE-20
CWE-399
 Improper Input Validation 
 Resource Management Errors 		CVE-2010-1285 2024-11-21 10:14 2010-07-1 Show GitHub Exploit DB Packet Storm
308804 - malcom_box lxr_cross_referencer Cross-site scripting (XSS) vulnerability in LXR Cross Referencer before 0.9.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the search body and the results pag… CWE-79
Cross-site Scripting 		CVE-2010-1625 2024-11-21 10:14 2010-06-24 Show GitHub Exploit DB Packet Storm
308805 - malcom_box lxr_cross_referencer Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in th… CWE-79
Cross-site Scripting 		CVE-2010-1448 2024-11-21 10:14 2010-06-24 Show GitHub Exploit DB Packet Storm
308806 - apache axis2 Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Ap… CWE-20
 Improper Input Validation  		CVE-2010-1632 2024-11-21 10:14 2010-06-23 Show GitHub Exploit DB Packet Storm
308807 - apple iphone_os WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method in certain situations involving IFRAME elements, which allows remote attackers to… CWE-200
Information Exposure 		CVE-2010-1407 2024-11-21 10:14 2010-06-23 Show GitHub Exploit DB Packet Storm
308808 - horde horde The IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as a proxy to scan internal networks via a crafted request to an unspecified test script. NOTE: this is … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-1638 2024-11-21 10:14 2010-06-23 Show GitHub Exploit DB Packet Storm
308809 6.5 MEDIUM
Network 		squirrelmail
fedoraproject
apple
redhat 		squirrelmail
fedora
mac_os_x_server
mac_os_x
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_desktop 		The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2010-1637 2024-11-21 10:14 2010-06-23 Show GitHub Exploit DB Packet Storm
308810 - oracle
springsource 		fusion_middleware
spring_framework 		SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoa… CWE-94
Code Injection 		CVE-2010-1622 2024-11-21 10:14 2010-06-22 Show GitHub Exploit DB Packet Storm