Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228371 2.6 注意 株式会社ピーエムナイン - OpenWnnフリック入力対応版におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2300 2013-03-26 12:02 2013-03-26 Show GitHub Exploit DB Packet Storm
228372 2.6 注意 COB's Products - COBIME におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0720 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
228373 2.6 注意 codedesign.jp - ArtIME 日本語入力におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0719 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
228374 2.6 注意 Baidu, Inc. - Simeji におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0718 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
228375 6.8 警告 Verizon - Verizon FiOS Actiontec ルータ MI424WR-GEN3I にクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0126 2013-03-26 10:48 2013-03-19 Show GitHub Exploit DB Packet Storm
228376 4.3 警告 Askia - ASKIA askiaweb の管理インターフェイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0124 2013-03-25 19:10 2013-03-20 Show GitHub Exploit DB Packet Storm
228377 7.5 危険 Askia - ASKIA askiaweb の管理インターフェイスにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-0123 2013-03-25 19:09 2013-03-20 Show GitHub Exploit DB Packet Storm
228378 3.5 注意 IBM - IBM Tivoli Endpoint Manager の Web レポートにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0453 2013-03-25 19:09 2013-03-20 Show GitHub Exploit DB Packet Storm
228379 4.3 警告 IBM - IBM Rational ClearQuest の Web クライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5757 2013-03-25 19:08 2013-03-20 Show GitHub Exploit DB Packet Storm
228380 7.5 危険 CA Technologies - 複数の CA SiteMinder 製品における他のユーザを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2013-2279 2013-03-25 19:07 2013-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310551 - adobe flash_player Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to cause a denial of … NVD-CWE-noinfo
CVE-2010-3639 2024-11-21 10:19 2010-11-8 Show GitHub Exploit DB Packet Storm
310552 - adobe flash_player Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Mac OS X, when Safari is used, allows attackers to obtain sensitive information via unknown vectors. NVD-CWE-noinfo
CVE-2010-3638 2024-11-21 10:19 2010-11-8 Show GitHub Exploit DB Packet Storm
310553 - adobe flash_player An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 (Flash10h.ocx) on Windows allows remote attackers to execute arbitrary code or cause a denial of serv… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3637 2024-11-21 10:19 2010-11-8 Show GitHub Exploit DB Packet Storm
310554 - adobe flash_player Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing o… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3636 2024-11-21 10:19 2010-11-8 Show GitHub Exploit DB Packet Storm
310555 - justsystems ichitaro Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3915. NVD-CWE-noinfo
CVE-2010-3916 2024-11-21 10:19 2010-11-6 Show GitHub Exploit DB Packet Storm
310556 - justsystems ichitaro Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3916. NVD-CWE-noinfo
CVE-2010-3915 2024-11-21 10:19 2010-11-6 Show GitHub Exploit DB Packet Storm
310557 - redhat luci The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses "[INSERT SECRET HERE]" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who authen… CWE-287
Improper Authentication
CVE-2010-3852 2024-11-21 10:19 2010-11-6 Show GitHub Exploit DB Packet Storm
310558 - poppler
foolabs
kde
glyphandcog
poppler
xpdf
kdegraphics
xpdfreader
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows co… CWE-20
 Improper Input Validation 
CVE-2010-3704 2024-11-21 10:19 2010-11-6 Show GitHub Exploit DB Packet Storm
310559 - poppler poppler The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dep… CWE-20
 Improper Input Validation 
CVE-2010-3703 2024-11-21 10:19 2010-11-6 Show GitHub Exploit DB Packet Storm
310560 - freedesktop
xpdfreader
apple
fedoraproject
opensuse
suse
debian
redhat
canonical
poppler
xpdf
cups
fedora
opensuse
linux_enterprise_server
debian_linux
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_desktop
ubuntu_linux
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent atta… CWE-476
 NULL Pointer Dereference
CVE-2010-3702 2024-11-21 10:19 2010-11-6 Show GitHub Exploit DB Packet Storm