Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251411	1.9	注意	FreeBSD	-	FreeBSD の crontab における任意のディレクトリの存在を確定される脆弱性	CWE-200 情報漏えい	CVE-2011-1074	2012-03-27 18:43	2011-03-4	Show	GitHub Exploit DB Packet Storm

251412	1.9	注意	アップル FreeBSD	-	FreeBSD および Apple Mac OS X の crontab.c における任意のファイルを特定する脆弱性	CWE-59 リンク解釈の問題	CVE-2011-1073	2012-03-27 18:43	2011-03-4	Show	GitHub Exploit DB Packet Storm

251413	3.3	注意	The PHP Group	-	PEAR のインストーラにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2011-1072	2012-03-27 18:43	2011-02-28	Show	GitHub Exploit DB Packet Storm

251414	2.6	注意	マイクロソフト	-	Microsoft Windows Azure SDK における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1068	2012-03-27 18:43	2011-02-23	Show	GitHub Exploit DB Packet Storm

251415	5	警告	Fedora Project	-	389 Directory Server の slapd におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1067	2012-03-27 18:43	2011-02-23	Show	GitHub Exploit DB Packet Storm

251416	2.6	注意	reyero	-	Drupal 用の Messaging モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1066	2012-03-27 18:43	2011-02-16	Show	GitHub Exploit DB Packet Storm

251417	9.3	危険	pipi	-	PIPI Player の PIPIWebPlayer ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1065	2012-03-27 18:43	2011-02-22	Show	GitHub Exploit DB Packet Storm

251418	6.8	警告	Qibosoft	-	qibosoft Qi Bo CMS の member/list.php におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-1064	2012-03-27 18:43	2011-02-22	Show	GitHub Exploit DB Packet Storm

251419	4.3	警告	cherry-software	-	Cherry-Design Photopad におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1063	2012-03-27 18:43	2011-02-22	Show	GitHub Exploit DB Packet Storm

251420	4.3	警告	taskfreak	-	TaskFreak! の include/html/header.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1062	2012-03-27 18:43	2011-02-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310721	-		linux canonical suse	linux_kernel ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_high_availability_extension	The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows …	CWE-476 NULL Pointer Dereference	CVE-2010-2495	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

310722	7.8	HIGH Local	linux vmware avaya	linux_kernel esx aura_system_manager aura_communication_manager aura_system_platform aura_session_manager aura_presence_services iq aura_voice_portal	Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of s…	CWE-120 Classic Buffer Overflow	CVE-2010-2492	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

310723	7.8	HIGH Local	linux vmware canonical suse	linux_kernel esx ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop	The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the ci…	NVD-CWE-noinfo	CVE-2010-2524	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

310724	-		linux	linux_kernel	Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibl…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-2521	2024-11-21 10:16	2010-09-8	Show	GitHub Exploit DB Packet Storm

310725	-		linux	linux_kernel	fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh va…	CWE-20 Improper Input Validation	CVE-2010-2248	2024-11-21 10:16	2010-09-8	Show	GitHub Exploit DB Packet Storm

310726	-		opensuse	opensuse	lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for phys…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-2532	2024-11-21 10:16	2010-09-4	Show	GitHub Exploit DB Packet Storm

310727	-		linux	linux_kernel	The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the st…	CWE-94 Code Injection	CVE-2010-2240	2024-11-21 10:16	2010-09-4	Show	GitHub Exploit DB Packet Storm

310728	-		linux suse debian canonical	linux_kernel linux_enterprise_server linux_enterprise_desktop linux_enterprise_software_development_kit debian_linux ubuntu_linux	The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write a…	CWE-200 Information Exposure	CVE-2010-2226	2024-11-21 10:16	2010-09-4	Show	GitHub Exploit DB Packet Storm

310729	-		common1	moobbs2	Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs2 before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2010-2365	2024-11-21 10:16	2010-09-1	Show	GitHub Exploit DB Packet Storm

310730	-		common1	moobbs	Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2010-2364	2024-11-21 10:16	2010-09-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed