Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257991	6.8	警告	IBM	-	IBM AIX および VIOS の sa_snap におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3405	2010-10-5 18:56	2010-08-6	Show	GitHub Exploit DB Packet Storm

257992	4.3	警告	有限会社のれんずプロ	-	AD-EDIT2 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2367	2010-10-5 11:02	2010-10-5	Show	GitHub Exploit DB Packet Storm

257993	9.3	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の ImageIO におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1817	2010-10-4 17:59	2010-09-8	Show	GitHub Exploit DB Packet Storm

257994	5.8	警告	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の FaceTime における通話をリダイレクトされる脆弱性	CWE-Other その他	CVE-2010-1810	2010-10-4 17:55	2010-09-8	Show	GitHub Exploit DB Packet Storm

257995	10	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の Accessibility コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-1809	2010-10-4 17:55	2010-09-8	Show	GitHub Exploit DB Packet Storm

257996	4	警告	ISC, Inc. IBM サイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	BIND 9 の DNSSEC 検証処理における脆弱性	CWE-noinfo 情報不足	CVE-2009-4022	2010-10-1 17:39	2009-12-2	Show	GitHub Exploit DB Packet Storm

257997	4	警告	ISC, Inc. サイバートラスト株式会社ターボリナックスヒューレット・パッカードレッドハット	-	ISC BIND における DNS キャッシュ汚染の脆弱性	CWE-noinfo 情報不足	CVE-2010-0290	2010-10-1 17:39	2010-01-22	Show	GitHub Exploit DB Packet Storm

257998	7.6	危険	ISC, Inc. ヒューレット・パッカード	-	ISC BIND における処理範囲外のデータ処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-0382	2010-10-1 17:38	2010-01-22	Show	GitHub Exploit DB Packet Storm

257999	9	危険	日立	-	Groupmax Scheduler Server における複数の脆弱性	CWE-noinfo 情報不足	-	2010-10-1 17:37	2010-09-6	Show	GitHub Exploit DB Packet Storm

258000	5.8	警告	富士通アクセラテクノロジ	-	Accela BizSearch の文書参照画面におけるフィッシング脅威の脆弱性	CWE-noinfo 情報不足	-	2010-10-1 17:37	2010-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265511	8.8	HIGH Network	piwigo	piwigo	Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted re…	CWE-352 Origin Validation Error	CVE-2017-10680	2024-11-21 12:06	2017-06-30	Show	GitHub Exploit DB Packet Storm

265512	7.5	HIGH Network	piwigo	piwigo	Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redirect URL that is returned in a request for the permalink ID…	CWE-200 Information Exposure	CVE-2017-10679	2024-11-21 12:06	2017-06-30	Show	GitHub Exploit DB Packet Storm

265513	8.8	HIGH Network	piwigo	piwigo	Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to delete permalinks via a crafted request.	CWE-352 Origin Validation Error	CVE-2017-10678	2024-11-21 12:06	2017-06-30	Show	GitHub Exploit DB Packet Storm

265514	6.1	MEDIUM Network	get-simple	getsimple_cms	admin/profile.php in GetSimple CMS 3.x has XSS in a name field.	CWE-79 Cross-site Scripting	CVE-2017-10673	2024-11-21 12:06	2017-06-29	Show	GitHub Exploit DB Packet Storm

265515	9.8	CRITICAL Network	xml-libxml_project debian	xml-libxml debian_linux	Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.	CWE-416 Use After Free	CVE-2017-10672	2024-11-21 12:06	2017-06-29	Show	GitHub Exploit DB Packet Storm

265516	7.8	HIGH Local	sthttpd_project	sthttpd	Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impa…	CWE-787 Out-of-bounds Write	CVE-2017-10671	2024-11-21 12:06	2017-06-29	Show	GitHub Exploit DB Packet Storm

265517	6.1	MEDIUM Network	zen-cart	zen_cart	In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS.	CWE-79 Cross-site Scripting	CVE-2017-10667	2024-11-21 12:06	2017-06-29	Show	GitHub Exploit DB Packet Storm

265518	7.8	HIGH Local	postfix	postfix	Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and late…	NVD-CWE-noinfo	CVE-2017-10140	2024-11-21 12:05	2018-04-17	Show	GitHub Exploit DB Packet Storm

265519	8.1	HIGH Network	oracle	peoplesoft_enterprise_peopletools	Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). The supported version that is affected is 9.1.00. Easily exp…	NVD-CWE-noinfo	CVE-2017-10301	2024-11-21 12:05	2018-01-18	Show	GitHub Exploit DB Packet Storm

265520	9.1	CRITICAL Network	oracle	database_server	Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker h…	NVD-CWE-noinfo	CVE-2017-10282	2024-11-21 12:05	2018-01-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed