Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239231 6.4 警告 mpop - Martin Lambers msmtp における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-3942 2012-09-25 17:38 2009-11-16 Show GitHub Exploit DB Packet Storm
239232 5 警告 mpop - Martin Lambers mpop における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-3941 2012-09-25 17:38 2009-11-16 Show GitHub Exploit DB Packet Storm
239233 10 危険 IBM - IBM BladeCenter T 用の Advanced Management Module ファームウェアにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3935 2012-09-25 17:38 2009-11-12 Show GitHub Exploit DB Packet Storm
239234 4.3 警告 Karim Ratib - Zoomify モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3918 2012-09-25 17:38 2009-11-4 Show GitHub Exploit DB Packet Storm
239235 4.3 警告 john c fiala - Drupal 用の Link モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3915 2012-09-25 17:38 2009-11-4 Show GitHub Exploit DB Packet Storm
239236 4.3 警告 Zoho Corporation - ManageEngine Netflow Analyzer の jspui/index.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3903 2012-09-25 17:38 2009-11-6 Show GitHub Exploit DB Packet Storm
239237 7.8 危険 IBM - AIX 上の IBM PowerHA におけるオペレーティングシステムの設定を変更される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3900 2012-09-25 17:38 2009-11-6 Show GitHub Exploit DB Packet Storm
239238 4.9 警告 Igor Sysoev - nginx の src/http/modules/ngx_http_dav_module.c におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3898 2012-09-25 17:38 2009-11-24 Show GitHub Exploit DB Packet Storm
239239 5 警告 Igor Sysoev - nginx の src/http/ngx_http_parse.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-3896 2012-09-25 17:38 2009-11-24 Show GitHub Exploit DB Packet Storm
239240 4.9 警告 Linux - Linux kernel の mm/nommu.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3888 2012-09-25 17:38 2009-10-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285161 8.1 HIGH
Network 		libuv
nodejs 		libuv
node.js 		The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cau… CWE-362
Race Condition 		CVE-2014-9748 2024-11-21 11:21 2020-02-12 Show GitHub Exploit DB Packet Storm
285162 9.8 CRITICAL
Network 		nwjs nw A vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames, which has an unspecified impact. NVD-CWE-noinfo
CVE-2014-9530 2024-11-21 11:21 2020-02-8 Show GitHub Exploit DB Packet Storm
285163 7.8 HIGH
Local 		videolan vlc_media_player The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size determined by arbitrary input data, which … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-9630 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
285164 7.8 HIGH
Local 		videolan vlc_media_player Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and… CWE-120
Classic Buffer Overflow 		CVE-2014-9629 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
285165 7.8 HIGH
Local 		videolan vlc_media_player The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow a… CWE-120
Classic Buffer Overflow 		CVE-2014-9628 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
285166 7.8 HIGH
Local 		videolan vlc_media_player The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows re… CWE-704
 Incorrect Type Conversion or Cast 		CVE-2014-9627 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
285167 7.8 HIGH
Local 		videolan vlc_media_player Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unsp… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2014-9626 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
285168 7.8 HIGH
Local 		videolan vlc_media_player The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remot… CWE-120
Classic Buffer Overflow 		CVE-2014-9625 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
285169 6.5 MEDIUM
Network 		tornadoweb tornado Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determi… CWE-203
 Information Exposure Through Discrepancy 		CVE-2014-9720 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
285170 6.5 MEDIUM
Adjacent 		google android A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to block Bluetooh access (Android Bug ID A-28672558). NVD-CWE-noinfo
CVE-2014-9908 2024-11-21 11:21 2020-01-9 Show GitHub Exploit DB Packet Storm