Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193741 7.5 重要
Network 		proxygen project - Facebook Proxygen の SPDY/2 コーデックにおけるハイジャック攻撃を実行される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2015-7263 2017-05-11 16:28 2015-11-19 Show GitHub Exploit DB Packet Storm
193742 7.5 重要
Network 		proxygen project - Facebook Proxygen におけるハイジャック攻撃を実行される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2015-7265 2017-05-11 16:22 2015-11-19 Show GitHub Exploit DB Packet Storm
193743 9.8 緊急
Network 		proxygen project - Facebook Proxygen の SPDY/2 コーデックにおけるハイジャックの脆弱性 CWE-74
インジェクション 		CVE-2015-7264 2017-05-11 16:22 2015-11-19 Show GitHub Exploit DB Packet Storm
193744 6.5 警告
Network 		ImageMagick - ImageMagick の coders/rle.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-7606 2017-05-11 16:17 2017-04-2 Show GitHub Exploit DB Packet Storm
193745 7.5 重要
Network 		アクシスコミュニケーションズ - AXIS Communications 製品のファームウェアにおける root として任意のファイルを変更される脆弱性 CWE-74
インジェクション 		CVE-2015-8258 2017-05-11 15:49 2015-11-19 Show GitHub Exploit DB Packet Storm
193746 8.8 重要
Network 		アクシスコミュニケーションズ - AXIS Communications 製品のファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-8255 2017-05-11 15:49 2015-11-19 Show GitHub Exploit DB Packet Storm
193747 5.5 警告
Local 		eParaksts - LVRTC eParakstitajs および edoc-libraries における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2015-8276 2017-05-11 15:31 2015-11-19 Show GitHub Exploit DB Packet Storm
193748 5.5 警告
Local 		eParaksts - LVRTC eParakstitajs および edoc-libraries における任意のファイルを書き込まれる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2015-8275 2017-05-11 15:31 2015-11-19 Show GitHub Exploit DB Packet Storm
193749 6.1 警告
Network 		Aurea - Jive におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2016-4334 2017-05-11 15:02 2016-10-21 Show GitHub Exploit DB Packet Storm
193750 9.8 緊急
Network 		シスコシステムズ - 複数の Cisco Aironet デバイス上で稼動する Cisco Mobility Express ソフトウェアにおける証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-3834 2017-05-11 14:38 2017-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347191 - resalecode php_shopping_cart_selling_website_script SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. CWE-89
SQL Injection 		CVE-2009-4689 2010-03-11 14:00 2010-03-11 Show GitHub Exploit DB Packet Storm
347192 - resalecode classified_linktrader_script SQL injection vulnerability in addlink.php in Classified Linktrader Script allows remote attackers to execute arbitrary SQL commands via the slctCategories parameter. CWE-89
SQL Injection 		CVE-2009-4691 2010-03-11 14:00 2010-03-11 Show GitHub Exploit DB Packet Storm
347193 - thomas_perez tribisur Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via d… CWE-22
Path Traversal 		CVE-2010-0958 2010-03-11 05:14 2010-03-11 Show GitHub Exploit DB Packet Storm
347194 - energizer duo_usb UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers … CWE-94
Code Injection 		CVE-2010-0103 2010-03-11 05:13 2010-03-11 Show GitHub Exploit DB Packet Storm
347195 - energizer duo_usb Per: http://www.energizer.com/usbcharger/download/March_8_2010_USB_Release__3_.pdf "Energizer has discontinued sale of this product and has removed the site to download the software. In addition… CWE-94
Code Injection 		CVE-2010-0103 2010-03-11 05:13 2010-03-11 Show GitHub Exploit DB Packet Storm
347196 - samba samba smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via stan… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0728 2010-03-11 05:13 2010-03-11 Show GitHub Exploit DB Packet Storm
347197 - inertialfate com_if_nexus Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot do… CWE-22
Path Traversal 		CVE-2009-4679 2010-03-9 14:00 2010-03-9 Show GitHub Exploit DB Packet Storm
347198 - perforce perforce_server The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data beginning with a byte sequence of 0x4c, 0xb3, 0xff, 0xff,… CWE-20
 Improper Input Validation  		CVE-2010-0929 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
347199 - perforce perforce_server The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite loop) via crafted data that includes a byte sequence of 0xdc, 0xff, 0xff, and 0… CWE-399
 Resource Management Errors 		CVE-2010-0930 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
347200 - perforce perforce_server The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data, possibly involving a large sndbuf value. CWE-20
 Improper Input Validation  		CVE-2010-0931 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm