Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229441 7.5 危険 yamamah - Yamamah の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1300 2012-12-20 19:29 2010-04-7 Show GitHub Exploit DB Packet Storm
229442 4 警告 PulseCMS - Pulse CMS の view.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1298 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
229443 7.5 危険 Zabbix - Zabbix の API における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1277 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
229444 4.3 警告 webtoolkit - Emweb Wt におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1274 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
229445 7.5 危険 smart-plugs - smartplugs の showplugs.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1271 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
229446 7.5 危険 phpscripte24 - Multi Auktions Komplett System の auktion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1270 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
229447 7.5 危険 phpscripte24 - phpscripte24 Niedrig Gebote Pro Auktions System II の auktion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1269 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
229448 6.8 警告 stafford.uklinux - libESMTP の smtp-tls.c における信頼済み証明書を偽装される脆弱性 CWE-310
暗号の問題
CVE-2010-1194 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
229449 6.8 警告 stafford.uklinux - libESMTP における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2010-1192 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
229450 6.4 警告 sahanafoundation - Sahana 災害管理システムにおけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2010-1191 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310811 - squid-cache squid The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a … NVD-CWE-Other
CVE-2010-3072 2024-11-21 10:17 2010-09-21 Show GitHub Exploit DB Packet Storm
310812 - hp system_management_homepage Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue wa… CWE-79
Cross-site Scripting
CVE-2010-3012 2024-11-21 10:17 2010-09-18 Show GitHub Exploit DB Packet Storm
310813 - arg0 encfs EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for local users to obtain sensitive information via calculations… CWE-310
Cryptographic Issues
CVE-2010-3075 2024-11-21 10:17 2010-09-18 Show GitHub Exploit DB Packet Storm
310814 - arg0 encfs SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which allows local users to obtain sensitive information via a wate… CWE-310
Cryptographic Issues
CVE-2010-3074 2024-11-21 10:17 2010-09-18 Show GitHub Exploit DB Packet Storm
310815 - arg0 encfs SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users … CWE-310
Cryptographic Issues
CVE-2010-3073 2024-11-21 10:17 2010-09-18 Show GitHub Exploit DB Packet Storm
310816 - hp system_management_homepage CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vec… CWE-20
 Improper Input Validation 
CVE-2010-3011 2024-11-21 10:17 2010-09-18 Show GitHub Exploit DB Packet Storm
310817 - hp 3com_officeconnect_gigabit_vpn_firewall_software
3crevf100-73
Cross-site scripting (XSS) vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2010-3010 2024-11-21 10:17 2010-09-16 Show GitHub Exploit DB Packet Storm
310818 - microsoft windows_server_2008
windows_xp
windows_vista
windows_server_2003
office
The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2, and Microsoft Offic… CWE-20
 Improper Input Validation 
CVE-2010-2738 2024-11-21 10:17 2010-09-16 Show GitHub Exploit DB Packet Storm
310819 - - - Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3, when directory-based Basic Authentication is enabled, allows remote attackers to bypass intended acce… CWE-287
Improper Authentication
CVE-2010-2731 2024-11-21 10:17 2010-09-16 Show GitHub Exploit DB Packet Storm
310820 - microsoft internet_information_services Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2730 2024-11-21 10:17 2010-09-16 Show GitHub Exploit DB Packet Storm