Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257741	-	-	Google	-	Google Chrome における複数の脆弱性	-	-	2011-02-4 14:11	2011-01-14	Show	GitHub Exploit DB Packet Storm

257742	5	警告	Wireshark	-	Wireshark の ASN.1 BER 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0445	2011-02-4 14:09	2011-01-11	Show	GitHub Exploit DB Packet Storm

257743	6.9	警告	サイバートラスト株式会社 Python Software Foundation レッドハット	-	Python の PySys_SetArgv API 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2008-5983	2011-02-4 13:58	2009-04-14	Show	GitHub Exploit DB Packet Storm

257744	2.6	注意	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2322	2011-02-3 14:55	2010-06-18	Show	GitHub Exploit DB Packet Storm

257745	5.8	警告	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0831	2011-02-3 14:52	2010-06-18	Show	GitHub Exploit DB Packet Storm

257746	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3652	2011-02-2 15:07	2010-11-4	Show	GitHub Exploit DB Packet Storm

257747	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3650	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

257748	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3649	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

257749	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3648	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

257750	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3647	2011-02-2 15:05	2010-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
303691	-	kylegilman	video_embed_\&_thumbnail_generator	The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors.	CWE-200 Information Exposure	CVE-2012-1786	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

303692	-	kylegilman	video_embed_\&_thumbnail_generator	kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2012-1785	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

303693	-	myjoblist	myjoblist	SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a profile action to index.php.	CWE-89 SQL Injection	CVE-2012-1784	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

303694	-	saurabh_gupta	tiny_server	Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number.	CWE-20 Improper Input Validation	CVE-2012-1783	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

303695	-	osqa	osqa	Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar.	CWE-79 Cross-site Scripting	CVE-2012-1782	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

303696	-	socialcms	socialcms	Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) TREF_email_address or (2) TR_n…	CWE-79 Cross-site Scripting	CVE-2012-1781	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

303697	-	socialcms	socialcms	SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter.	CWE-89 SQL Injection	CVE-2012-1780	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

303698	-	idevspot	idev-businessdirectory	Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php.	CWE-79 Cross-site Scripting	CVE-2012-1779	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

303699	-	createvision	createvision_cms	SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2012-1778	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

303700	-	videolan	vlc_media_player	Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-1776	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed