Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259361	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の comment モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3093	2010-10-7 16:38	2010-08-11	Show	GitHub Exploit DB Packet Storm

259362	5.5	警告	Drupal サイバートラスト株式会社	-	Drupal の upload モジュールにおけるファイルのダウンロード制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3092	2010-10-7 16:37	2010-08-11	Show	GitHub Exploit DB Packet Storm

259363	9.3	危険	アップル	-	Apple QuickTime の IPersistPropertyBag2::Read における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1818	2010-10-6 16:57	2010-08-31	Show	GitHub Exploit DB Packet Storm

259364	9.3	危険	IBM	-	IBM Lotus Domino サーバの MailCheck821Address 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3407	2010-10-6 16:57	2010-09-16	Show	GitHub Exploit DB Packet Storm

259365	6.8	警告	マイクロソフト	-	Microsoft Outlook Web Access におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3213	2010-10-6 16:56	2010-09-7	Show	GitHub Exploit DB Packet Storm

259366	6.9	警告	マイクロソフト	-	Microsoft Windows の Win32 サブシステム内にある CSRSS における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1891	2010-10-6 16:56	2010-09-14	Show	GitHub Exploit DB Packet Storm

259367	9	危険	マイクロソフト	-	Microsoft Windows の LSASS におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0820	2010-10-6 16:55	2010-09-14	Show	GitHub Exploit DB Packet Storm

259368	9.3	危険	マイクロソフト	-	Microsoft Windows の WordPad Text Converters における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2563	2010-10-6 16:55	2010-09-14	Show	GitHub Exploit DB Packet Storm

259369	9.3	危険	マイクロソフト	-	Microsoft Windows の RPC クライアント実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2567	2010-10-6 16:55	2010-09-14	Show	GitHub Exploit DB Packet Storm

259370	6.8	警告	マイクロソフト	-	Windows 上で稼働する Microsoft Internet Information Services におけるアクセス制限を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-2731	2010-10-6 16:54	2010-09-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267431	7.0	HIGH Local	google linux	android linux_kernel	An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Mode…	NVD-CWE-noinfo	CVE-2017-0449	2024-11-21 12:03	2017-02-9	Show	GitHub Exploit DB Packet Storm

267432	5.5	MEDIUM Local	google linux	android linux_kernel	An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it c…	CWE-200 Information Exposure	CVE-2017-0448	2024-11-21 12:03	2017-02-9	Show	GitHub Exploit DB Packet Storm

267433	7.5	HIGH Network	mediawiki	mediawiki	MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attr(title…	NVD-CWE-noinfo	CVE-2017-0371	2024-11-21 12:02	2022-02-19	Show	GitHub Exploit DB Packet Storm

267434	7.4	HIGH Network	mcabber canonical debian	mcabber ubuntu_linux debian_linux	MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which wil…	CWE-269 Improper Privilege Management	CVE-2016-9928	2024-11-21 12:02	2020-02-6	Show	GitHub Exploit DB Packet Storm

267435	7.5	HIGH Network	webmproject	libwebp	In libwebp 0.5.1, there is a double free bug in libwebpmux.	CWE-415 Double Free	CVE-2016-9969	2024-11-21 12:02	2019-05-24	Show	GitHub Exploit DB Packet Storm

267436	9.8	CRITICAL Network	mediawiki debian	mediawiki debian_linux	Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.	CWE-74 Injection	CVE-2017-0372	2024-11-21 12:02	2018-04-14	Show	GitHub Exploit DB Packet Storm

267437	5.3	MEDIUM Network	mediawiki debian	mediawiki debian_linux	Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.	CWE-20 Improper Input Validation	CVE-2017-0370	2024-11-21 12:02	2018-04-14	Show	GitHub Exploit DB Packet Storm

267438	6.5	MEDIUM Network	mediawiki debian	mediawiki debian_linux	Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is protected against it.	CWE-276 Incorrect Default Permissions	CVE-2017-0369	2024-11-21 12:02	2018-04-14	Show	GitHub Exploit DB Packet Storm

267439	5.3	MEDIUM Network	mediawiki debian	mediawiki debian_linux	Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages.	CWE-20 Improper Input Validation	CVE-2017-0368	2024-11-21 12:02	2018-04-14	Show	GitHub Exploit DB Packet Storm

267440	8.8	HIGH Network	mediawiki debian	mediawiki debian_linux	Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is insecure.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2017-0367	2024-11-21 12:02	2018-04-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed