Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224131	2.1	注意	レッドハット VMware Samba Project	-	Samba の client/mount.cifs.c におけるサービス運用妨害 (mtab 破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0547	2012-12-21 16:48	2010-02-4	Show	GitHub Exploit DB Packet Storm

224132	9.3	危険	VMware RPM レッドハット	-	RPM におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-94 コード・インジェクション	CVE-2011-3378	2012-12-21 16:47	2011-12-24	Show	GitHub Exploit DB Packet Storm

224133	7.2	危険	サイバートラスト株式会社 VMware レッドハット	-	Red Hat Package Manager の lib/fsm.c における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2059	2012-12-21 16:46	2010-06-8	Show	GitHub Exploit DB Packet Storm

224134	7.2	危険	VMware Linux	-	Linux Kernel の net/wireless/nl80211.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2517	2012-12-21 16:44	2012-05-24	Show	GitHub Exploit DB Packet Storm

224135	2.1	注意	VMware Linux	-	Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2495	2012-12-21 16:43	2012-06-13	Show	GitHub Exploit DB Packet Storm

224136	4.9	警告	VMware Linux レッドハット	-	Linux kernel の gfs2_fallocate 関数におけるサービス運用妨害 (バグおよびシステムクラッシュ）の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2689	2012-12-21 16:42	2011-07-21	Show	GitHub Exploit DB Packet Storm

224137	7.2	危険	VMware Linux	-	Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2525	2012-12-21 16:41	2012-02-2	Show	GitHub Exploit DB Packet Storm

224138	7.6	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4422	2012-12-21 16:38	2011-02-15	Show	GitHub Exploit DB Packet Storm

224139	5.1	警告	サン・マイクロシステムズヒューレット・パッカードオラクル VMware 日立レッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3574	2012-12-21 16:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

224140	5.1	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3573	2012-12-21 16:36	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
278351	-	ibm	db2	IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon c…	CWE-20 Improper Input Validation	CVE-2014-6209	2024-11-21 11:13	2014-12-13	Show	GitHub Exploit DB Packet Storm

278352	-	ibm	cognos_business_intelligence	Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows rem…	CWE-79 Cross-site Scripting	CVE-2014-6145	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

278353	-	ibm	websphere_datapower_xc10_appliance_firmware	The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors.	CWE-200 Information Exposure	CVE-2014-6138	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

278354	-	ibm	websphere_portal	Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 a…	CWE-79 Cross-site Scripting	CVE-2014-6215	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

278355	-	ibm	websphere_datapower_xc10_appliance_firmware	Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted UR…	CWE-79 Cross-site Scripting	CVE-2014-6163	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

278356	-	ibm	websphere_datapower_xc10_appliance_firmware	The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response.	CWE-200 Information Exposure	CVE-2014-6143	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

278357	-	ibm	operational_decision_manager websphere_ilog_jrules websphere_operational_decision_management	The Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules 7.1 before MP1 FP5 IF43; WebSphere Operational Decision Management 7.5 before FP3 IF41; and Operation…	CWE-200 Information Exposure	CVE-2014-6114	2024-11-21 11:13	2014-12-11	Show	GitHub Exploit DB Packet Storm

278358	-	ibm	tivoli_endpoint_manager_mobile_device_management	IBM Tivoli Endpoint Manager Mobile Device Management (MDM) before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitra…	CWE-310 Cryptographic Issues	CVE-2014-6140	2024-11-21 11:13	2014-12-7	Show	GitHub Exploit DB Packet Storm

278359	-	gnu	glibc	GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value of "0xffff" to the iconv function …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-6040	2024-11-21 11:13	2014-12-6	Show	GitHub Exploit DB Packet Storm

278360	-	zohocorp	manageengine_opmanager manageengine_it360 manageengine_social_it_plus	Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and IT360 10.3, 10.4, and earlier allows remote attackers or re…	CWE-22 Path Traversal	CVE-2014-6036	2024-11-21 11:13	2014-12-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed