NVD Vulnerability Information Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311751 4.3 MEDIUM
ibm websphere_application_server mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP requ… CWE-20
 Improper Input Validation 
CVE-2010-2327 2024-11-21 10:16 2010-06-19 Show GitHub Exploit DB Packet Storm
311752 4.3 MEDIUM
ibm websphere_application_server IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace a… CWE-200
Information Exposure
CVE-2010-2326 2024-11-21 10:16 2010-06-19 Show GitHub Exploit DB Packet Storm
311753 4.3 MEDIUM
ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting
CVE-2010-2325 2024-11-21 10:16 2010-06-19 Show GitHub Exploit DB Packet Storm
311754 7.5 HIGH
ibm websphere_application_server IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unknown vectors. NVD-CWE-noinfo
CVE-2010-2324 2024-11-21 10:16 2010-06-19 Show GitHub Exploit DB Packet Storm
311755 5.0 MEDIUM
ibm websphere_application_server IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creatio… CWE-200
Information Exposure
CVE-2010-2323 2024-11-21 10:16 2010-06-19 Show GitHub Exploit DB Packet Storm
311756 2.6 LOW
matthias_klose fastjar Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .… CWE-22
Path Traversal
CVE-2010-2322 2024-11-21 10:16 2010-06-19 Show GitHub Exploit DB Packet Storm
311757 9.3 HIGH
adobe indesign_cs3 Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2321 2024-11-21 10:16 2010-06-19 Show GitHub Exploit DB Packet Storm
311758 1.9 LOW
vincent_fourmond pmount The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/. CWE-59
Link Following
CVE-2010-2192 2024-11-21 10:16 2010-06-19 Show GitHub Exploit DB Packet Storm
311759 7.5 HIGH
idevspot textads SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter. CWE-89
SQL Injection
CVE-2010-2319 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311760 4.3 MEDIUM
phpcityportal phpcityportal Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter. CWE-79
Cross-site Scripting
CVE-2010-2318 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311761 7.5 HIGH
wmsdesign wmscms Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr, (3) pid, (4) sbl, and (5) FilePath parameters to… CWE-89
SQL Injection
CVE-2010-2317 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311762 4.3 MEDIUM
wmsdesign wmscms Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) … CWE-79
Cross-site Scripting
CVE-2010-2316 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311763 7.5 HIGH
smartisoft phpbazar PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter. CWE-94
Code Injection
CVE-2010-2315 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311764 6.8 MEDIUM
edmondhui.homeip np_twitter PHP remote file inclusion vulnerability in nucleus/plugins/NP_Twitter.php in the NP_Twitter Plugin 0.8 and 0.9 for Nucleus, when register_globals is enabled, allows remote attackers to execute arbitr… CWE-94
Code Injection
CVE-2010-2314 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311765 6.8 MEDIUM
anodyne-productions simm_management_system Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. … CWE-22
Path Traversal
CVE-2010-2313 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311766 7.5 HIGH
hauntmax haunted_house_directory_listing_cms SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action. CWE-89
SQL Injection
CVE-2010-2312 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311767 9.3 HIGH
power-tab power_tab_editor Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary code via a .ptb file with a long font name. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2311 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311768 5.0 MEDIUM
solarwinds tftp_server SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request. CWE-20
 Improper Input Validation 
CVE-2010-2310 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311769 7.5 HIGH
evological evocam Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET request. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2309 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311770 7.2 HIGH
sophos anti-virus Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile func… NVD-CWE-noinfo
CVE-2010-2308 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311771 5.0 MEDIUM
motorola surfboard_sbv6120e Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files … CWE-22
Path Traversal
CVE-2010-2307 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311772 4.3 MEDIUM
sourcefire 3d2000
3d9900
3d1000
dc1000
The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote atta… CWE-16
Configuration
CVE-2010-2306 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311773 9.3 HIGH
symantec sygate_personal_firewall Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegStr… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2305 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311774 10.0 HIGH
google
opensuse
suse
chrome
opensuse
suse_linux_enterprise_server
suse_linux_enterprise_desktop
Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via ve… CWE-416
 Use After Free
CVE-2010-2302 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311775 4.3 MEDIUM
google
opensuse
suse
chrome
opensuse
suse_linux_enterprise_server
suse_linux_enterprise_desktop
Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject arbitrary web script or HTML via vectors relat… CWE-79
Cross-site Scripting
CVE-2010-2301 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311776 10.0 HIGH
google chrome Use-after-free vulnerability in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to execute arbitrary code … CWE-416
 Use After Free
CVE-2010-2300 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311777 10.0 HIGH
google chrome The Clipboard::DispatchObject function in app/clipboard/clipboard.cc in Google Chrome before 5.0.375.70 does not properly handle CBF_SMBITMAP objects in a ViewHostMsg_ClipboardWriteObjectsAsync messa… CWE-843
Type Confusion
CVE-2010-2299 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311778 10.0 HIGH
google chrome browser/renderer_host/database_dispatcher_host.cc in Google Chrome before 5.0.375.70 on Linux does not properly handle ViewHostMsg_DatabaseOpenFile messages in chroot-based sandboxing, which allows r… CWE-20
 Improper Input Validation 
CVE-2010-2298 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311779 9.3 HIGH
google
opensuse
suse
chrome
opensuse
suse_linux_enterprise_server
suse_linux_enterprise_desktop
rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via … CWE-94
Code Injection
CVE-2010-2297 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311780 9.3 HIGH
google chrome The implementation of unspecified DOM methods in Google Chrome before 5.0.375.70 allows remote attackers to bypass the Same Origin Policy via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-2296 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311781 4.3 MEDIUM
google chrome page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remo… CWE-20
 Improper Input Validation 
CVE-2010-2295 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311782 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used in conjunction with VMWare Tools on a VMWare platform, allows attackers to cause a denial o… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2189 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311783 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2188 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311784 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2187 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311785 9.3 HIGH
adobe
macromedia
flash_player
air
Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or pos… CWE-94
NVD-CWE-noinfo
Code Injection
CVE-2010-2186 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311786 9.3 HIGH
adobe
macromedia
flash_player
air
Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2185 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311787 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2184 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311788 9.3 HIGH
adobe
macromedia
flash_player
air
Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a differ… CWE-189
Numeric Errors
CVE-2010-2183 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311789 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2182 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311790 9.3 HIGH
adobe
macromedia
flash_player
air
Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a differ… CWE-189
Numeric Errors
CVE-2010-2181 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311791 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2180 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311792 4.3 MEDIUM
adobe flash_player
air
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers t… CWE-79
Cross-site Scripting
CVE-2010-2179 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311793 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2178 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311794 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2177 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311795 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2176 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311796 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2175 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311797 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid point… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2174 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311798 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid point… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2173 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311799 4.3 MEDIUM
adobe flash_player Adobe Flash Player 9 before 9.0.277.0 on unspecified UNIX platforms allows attackers to cause a denial of service via unknown vectors. NVD-CWE-noinfo
CVE-2010-2172 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm
311800 9.3 HIGH
adobe
macromedia
flash_player
air
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2171 2024-11-21 10:16 2010-06-16 Show GitHub Exploit DB Packet Storm