Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
259001 6.8 警告 Haxx
アップル
サイバートラスト株式会社
レッドハット		 - curl および libcurl の redirect 実装における任意のコマンドを実行される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-0037 2010-04-13 14:45 2009-03-3 Show GitHub Exploit DB Packet Storm
259002 9.3 危険 ジャストシステム - 一太郎シリーズにおける任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-1424 2010-04-12 15:32 2010-04-12 Show GitHub Exploit DB Packet Storm
259003 4.4 警告 ヒューレット・パッカード - HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1030 2010-04-12 12:19 2010-03-26 Show GitHub Exploit DB Packet Storm
259004 10 危険 IntelliCom Innovation AB - IntelliCom NetBiter Config HICP におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4462 2010-04-12 12:19 2010-03-29 Show GitHub Exploit DB Packet Storm
259005 7.5 危険 The PHP Group - PHP の セッション拡張子における open_basedir または safe_mode 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1130 2010-04-12 12:19 2010-03-26 Show GitHub Exploit DB Packet Storm
259006 4.3 警告 Zope Foundation - Zope におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1104 2010-04-9 16:21 2010-03-25 Show GitHub Exploit DB Packet Storm
259007 4 警告 ヒューレット・パッカード - HP HP-UX の NFS/ONCplus にあるインストールプロセスにおけるファイルシステムのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0451 2010-04-9 16:21 2010-03-25 Show GitHub Exploit DB Packet Storm
259008 7.5 危険 GNU Project
サイバートラスト株式会社
レッドハット		 - GnuTLS の gnutls_x509_crt_get_serial 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0731 2010-04-9 16:21 2010-03-25 Show GitHub Exploit DB Packet Storm
259009 4.3 警告 シスコシステムズ - Cisco Router and Security Device Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0594 2010-04-8 15:03 2010-04-8 Show GitHub Exploit DB Packet Storm
259010 4.3 警告 MODX - MODx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1427 2010-04-8 15:02 2010-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258591 6.1 MEDIUM
Network 		moodle moodle In Moodle 3.x, there is XSS in the assignment submission page. CWE-79
Cross-site Scripting 		CVE-2017-2578 2024-11-21 12:23 2017-01-20 Show GitHub Exploit DB Packet Storm
258592 5.3 MEDIUM
Network 		moodle moodle In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums. CWE-20
 Improper Input Validation  		CVE-2017-2576 2024-11-21 12:23 2017-01-20 Show GitHub Exploit DB Packet Storm
258593 7.1 HIGH
Local 		linux linux_kernel arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application … CWE-200
CWE-416
Information Exposure
 Use After Free 		CVE-2017-2584 2024-11-21 12:23 2017-01-15 Show GitHub Exploit DB Packet Storm
258594 4.7 MEDIUM
Network 		zimbra zm-ajax A vulnerability has been found in Zimbra zm-ajax up to 8.8.1 and classified as problematic. Affected by this vulnerability is the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt… - CVE-2017-20188 2024-11-21 12:22 2024-01-3 Show GitHub Exploit DB Packet Storm
258595 6.1 MEDIUM
Network 		share_on_diaspora_project share_on_diaspora A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/ur… - CVE-2017-20176 2024-11-21 12:22 2023-02-6 Show GitHub Exploit DB Packet Storm
258596 9.8 CRITICAL
Network 		contentmap_project contentmap A vulnerability was found in AlexRed contentmap. It has been rated as critical. Affected by this issue is the function Load of the file contentmap.php. The manipulation of the argument contentid lead… - CVE-2017-20173 2024-11-21 12:22 2023-01-19 Show GitHub Exploit DB Packet Storm
258597 9.8 CRITICAL
Network 		apersistence_project apersistence A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the file db/sql/mysqlUtils.js. The manipulation leads to sql injection. The identifie… CWE-89
SQL Injection 		CVE-2017-20171 2024-11-21 12:22 2023-01-18 Show GitHub Exploit DB Packet Storm
258598 - - - A vulnerability was found in Zimbra zm-admin-ajax up to 8.8.1. It has been classified as problematic. This affects the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFo… - CVE-2017-20191 2024-11-21 12:22 2024-03-31 Show GitHub Exploit DB Packet Storm
258599 - - - Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text" attack… - CVE-2017-20190 2024-11-21 12:22 2024-03-27 Show GitHub Exploit DB Packet Storm
258600 9.8 CRITICAL
Network 		clojure clojure In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrary code upon deserialization. This is relevant if a server deserializes untrusted objects. CWE-502
 Deserialization of Untrusted Data 		CVE-2017-20189 2024-11-21 12:22 2024-01-22 Show GitHub Exploit DB Packet Storm