Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229321	6.8	警告	シスコシステムズ	-	複数の Cisco 製品のコマンドラインインタフェースにおける root 権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1196	2013-05-1 12:34	2013-04-12	Show	GitHub Exploit DB Packet Storm

229322	9.3	危険	IBM	-	IBM SPSS SamplePower の vsflex7l ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5947	2013-05-1 11:42	2013-04-26	Show	GitHub Exploit DB Packet Storm

229323	9.3	危険	IBM	-	IBM SPSS SamplePower の C1sizer.ocx におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5946	2013-05-1 11:42	2013-04-26	Show	GitHub Exploit DB Packet Storm

229324	9.3	危険	IBM	-	IBM SPSS SamplePower の Vsflex8l ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5945	2013-05-1 11:41	2013-04-26	Show	GitHub Exploit DB Packet Storm

229325	4.3	警告	ヒューレット・パッカード	-	HP Managed Printing Administration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5219	2013-05-1 11:22	2013-04-25	Show	GitHub Exploit DB Packet Storm

229326	3.5	注意	IBM	-	複数の IBM 製品で使用される IBM Sametime のクライアントの実装におけるコマンドを送信される脆弱性	CWE-noinfo 情報不足	CVE-2013-0553	2013-05-1 11:21	2013-04-22	Show	GitHub Exploit DB Packet Storm

229327	3.5	注意	IBM	-	IBM Sametime の Sametime Links サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0533	2013-05-1 11:15	2013-04-22	Show	GitHub Exploit DB Packet Storm

229328	9.3	危険	IBM	-	IBM SPSS SamplePower の olch2x32 ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-0593	2013-05-1 11:14	2013-04-26	Show	GitHub Exploit DB Packet Storm

229329	2.3	注意	IBM	-	IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0572	2013-05-1 11:13	2013-04-25	Show	GitHub Exploit DB Packet Storm

229330	2.9	注意	IBM	-	IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0571	2013-05-1 11:11	2013-04-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310111	-		gnome	gtk	Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to gain privileges via a Trojan horse Wintab32.dll file in the current working directory.	CWE-426 Untrusted Search Path	CVE-2010-4831	2024-11-21 10:21	2011-09-7	Show	GitHub Exploit DB Packet Storm

310112	-		t-dreams	job_career_package	SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the z_Residency parameter.	CWE-89 SQL Injection	CVE-2010-4830	2024-11-21 10:21	2011-08-24	Show	GitHub Exploit DB Packet Storm

310113	-		t-dreams	cars_ads_package	SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter.	CWE-89 SQL Injection	CVE-2010-4829	2024-11-21 10:21	2011-08-24	Show	GitHub Exploit DB Packet Storm

310114	-		solarwinds	orion_network_performance_monitor	Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title paramete…	CWE-79 Cross-site Scripting	CVE-2010-4828	2024-11-21 10:21	2011-08-24	Show	GitHub Exploit DB Packet Storm

310115	-		snitz_communications	snitz_forums_2000	Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script or HTML via the M_NAME parameter. NOTE: some of these detai…	CWE-79 Cross-site Scripting	CVE-2010-4827	2024-11-21 10:21	2011-08-24	Show	GitHub Exploit DB Packet Storm

310116	-		snitz_communications	snitz_forums_2000	SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the M_NAME parameter. NOTE: some of these details are obtained fr…	CWE-89 SQL Injection	CVE-2010-4826	2024-11-21 10:21	2011-08-24	Show	GitHub Exploit DB Packet Storm

310117	-		pleer	wp-twitter-feed	Cross-site scripting (XSS) vulnerability in magpie_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ur…	CWE-79 Cross-site Scripting	CVE-2010-4825	2024-11-21 10:21	2011-08-24	Show	GitHub Exploit DB Packet Storm

310118	7.8	HIGH Local	linux canonical	linux_kernel ubuntu_linux	The iowarrior_write function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow…	CWE-787 Out-of-bounds Write	CVE-2010-4656	2024-11-21 10:21	2011-07-19	Show	GitHub Exploit DB Packet Storm

310119	5.5	MEDIUM Local	linux vmware canonical	linux_kernel esx ubuntu_linux	net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by lever…	CWE-665 Improper Initialization	CVE-2010-4655	2024-11-21 10:21	2011-07-19	Show	GitHub Exploit DB Packet Storm

310120	-		squirrelmail	squirrelmail	Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) drop-down selection list…	CWE-79 Cross-site Scripting	CVE-2010-4555	2024-11-21 10:21	2011-07-15	Show	GitHub Exploit DB Packet Storm