Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228271 3.5 注意 thomas turnbull
roger lopez		 - Drupal 用の Node Blocks モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0370 2012-12-20 19:28 2010-01-13 Show GitHub Exploit DB Packet Storm
228272 9.3 危険 VideoLAN - VideoLAN VLC Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0364 2012-12-20 19:28 2010-01-21 Show GitHub Exploit DB Packet Storm
228273 2.6 注意 zeus - Zeus Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0363 2012-12-20 19:28 2010-01-13 Show GitHub Exploit DB Packet Storm
228274 5 警告 zeus - Zeus Web Server における DNS レスポンスを偽装される脆弱性 CWE-310
暗号の問題 		CVE-2010-0362 2012-12-20 19:28 2010-01-13 Show GitHub Exploit DB Packet Storm
228275 10 危険 zeus - Zeus Web Server の SSLv2 サポートにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0359 2012-12-20 19:28 2010-01-13 Show GitHub Exploit DB Packet Storm
228276 9.3 危険 Viscom Software - Viscom Software Movie Player Pro SDK ActiveX の MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0356 2012-12-20 19:28 2010-01-18 Show GitHub Exploit DB Packet Storm
228277 4.3 警告 TYPO3 Association - TYPO3 用の VD / Geomap エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0347 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228278 4.3 警告 TYPO3 Association - TYPO3 用の Tip many friends エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0346 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228279 4.3 警告 TYPO3 Association - TYPO3 用の Majordomo エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0345 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228280 7.5 危険 TYPO3 Association - TYPO3 用の zak_store_management エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0344 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274681 7.3 HIGH
Network 		ffmpeg ffmpeg The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which al… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8662 2024-11-21 11:38 2015-12-24 Show GitHub Exploit DB Packet Storm
274682 8.3 HIGH
Network 		ffmpeg ffmpeg The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote at… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8661 2024-11-21 11:38 2015-12-24 Show GitHub Exploit DB Packet Storm
274683 10.0 CRITICAL
Network 		dovestones ad_self_password_reset The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8267 2024-11-21 11:38 2015-12-24 Show GitHub Exploit DB Packet Storm
274684 6.8 MEDIUM
Network 		isc kea The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service (daemon crash) via a malformed packe… CWE-20
 Improper Input Validation  		CVE-2015-8373 2024-11-21 11:38 2015-12-23 Show GitHub Exploit DB Packet Storm
274685 - adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc 		Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Rea… CWE-787
 Out-of-bounds Write 		CVE-2015-8458 2024-11-21 11:38 2015-12-21 Show GitHub Exploit DB Packet Storm
274686 - token_insert_entity_project token_insert_entity The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote authenticated users with certain permissions to bypass intended access restri… CWE-200
Information Exposure 		CVE-2015-8602 2024-11-21 11:38 2015-12-18 Show GitHub Exploit DB Packet Storm
274687 - chat_room_project chat_room The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restr… CWE-200
Information Exposure 		CVE-2015-8601 2024-11-21 11:38 2015-12-18 Show GitHub Exploit DB Packet Storm
274688 - sap mobile_platform The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vec… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8600 2024-11-21 11:38 2015-12-18 Show GitHub Exploit DB Packet Storm
274689 - cacti cacti SQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rra_id parameter in a properties action to gr… CWE-89
SQL Injection 		CVE-2015-8369 2024-11-21 11:38 2015-12-18 Show GitHub Exploit DB Packet Storm
274690 - ntop ntopng ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua. CWE-254
 7PK - Security Features 		CVE-2015-8368 2024-11-21 11:38 2015-12-18 Show GitHub Exploit DB Packet Storm