Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250951	6.4	警告	The PHP Group	-	PHP の sysvshm 拡張における任意のメモリアドレスを書かれる脆弱性	CWE-399 リソース管理の問題	CVE-2010-1861	2010-08-17 17:33	2010-05-5	Show	GitHub Exploit DB Packet Storm

250952	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0654	2010-08-16 18:57	2010-02-18	Show	GitHub Exploit DB Packet Storm

250953	7.6	危険	アップル	-	Apple Safari における window オブジェクトの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-1939	2010-08-16 15:08	2010-05-12	Show	GitHub Exploit DB Packet Storm

250954	7.6	危険	IBM	-	IBM Lotus Domino Web Access の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0919	2010-08-16 15:05	2010-03-3	Show	GitHub Exploit DB Packet Storm

250955	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品における重要な cross-origin 情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1207	2010-08-13 17:15	2010-07-20	Show	GitHub Exploit DB Packet Storm

250956	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品におけるクローム特権で任意の JavaScript コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1215	2010-08-13 17:14	2010-07-20	Show	GitHub Exploit DB Packet Storm

250957	7.8	危険	マイクロソフト	-	Microsoft Windows におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1892	2010-08-13 14:01	2010-08-13	Show	GitHub Exploit DB Packet Storm

250958	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1212	2010-08-12 19:03	2010-07-20	Show	GitHub Exploit DB Packet Storm

250959	4.3	警告	アップルサイバートラスト株式会社レッドハットターボリナックス CUPS	-	Apple Mac OS X の CUPS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2820	2010-08-12 17:29	2009-11-9	Show	GitHub Exploit DB Packet Storm

250960	9.3	危険	アップル	-	Apple iTunes におけるバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1777	2010-08-11 18:31	2010-07-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212041	5.3	MEDIUM Network	ntp	ntp	ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.	CWE-284 Improper Access Control	CVE-2015-8139	2024-11-21 11:38	2017-01-31	Show	GitHub Exploit DB Packet Storm

212042	5.3	MEDIUM Network	ntp	ntp	NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.	CWE-20 Improper Input Validation	CVE-2015-8138	2024-11-21 11:38	2017-01-31	Show	GitHub Exploit DB Packet Storm

212043	7.5	HIGH Network	vercel	ms	The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."	CWE-1333 Inefficient Regular Expression Complexity	CVE-2015-8315	2024-11-21 11:38	2017-01-24	Show	GitHub Exploit DB Packet Storm

212044	9.8	CRITICAL Network	netbsd	netbsd	CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware pr…	CWE-20 Improper Input Validation	CVE-2015-8212	2024-11-21 11:38	2017-01-20	Show	GitHub Exploit DB Packet Storm

212045	6.1	MEDIUM Network	exponentcms	exponent_cms	Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly have other unspe…	CWE-79 Cross-site Scripting	CVE-2015-8684	2024-11-21 11:38	2017-01-19	Show	GitHub Exploit DB Packet Storm

212046	6.1	MEDIUM Network	exponentcms	exponent_cms	Cross-site scripting (XSS) vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email.	CWE-79 Cross-site Scripting	CVE-2015-8667	2024-11-21 11:38	2017-01-19	Show	GitHub Exploit DB Packet Storm

212047	6.5	MEDIUM Local	qemu	qemu	QEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off-by-one error. It happens while processing transmit (tx) descriptors in 'tx_consume' routine, if a desc…	CWE-193 Off-by-one Error	CVE-2015-8701	2024-11-21 11:38	2016-12-30	Show	GitHub Exploit DB Packet Storm

212048	8.8	HIGH Network	open-xchange	ox_guard	An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a specific user after providing authentication credentials. Cl…	CWE-320 Key Management Errors	CVE-2015-8542	2024-11-21 11:38	2016-12-15	Show	GitHub Exploit DB Packet Storm

212049	6.1	MEDIUM Network	broadcom	release_automation	Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 befo…	CWE-79 Cross-site Scripting	CVE-2015-8699	2024-11-21 11:38	2016-06-29	Show	GitHub Exploit DB Packet Storm

212050	7.1	HIGH Local	broadcom	release_automation	CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary…	NVD-CWE-Other	CVE-2015-8698	2024-11-21 11:38	2016-06-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed