Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250881	9.3	危険	Novell	-	Novell ZHM の ZfHIPCND.exe におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4299	2012-03-27 18:42	2010-11-2	Show	GitHub Exploit DB Packet Storm

250882	7.5	危険	dustincowell	-	Free Simple Software の download モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4298	2012-03-27 18:42	2010-11-26	Show	GitHub Exploit DB Packet Storm

250883	7.5	危険	Artica ST	-	Pandora FMS における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4283	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250884	7.5	危険	Artica ST	-	Pandora FMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4282	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250885	7.5	危険	Artica ST	-	Pandora FMS の safe_url_extraclean 関数における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4281	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250886	7.5	危険	Artica ST	-	Pandora FMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4280	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250887	10	危険	Artica ST	-	Pandora FMS のディフォルト設定における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-4279	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250888	7.5	危険	accimoveis	-	DescargarVista ACC Imoveis における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4273	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250889	7.5	危険	pulseinfotech Joomla!	-	Joomla! 用の Pulse Infotech Sponsor Wall コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4272	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250890	7.5	危険	ImpressCMS	-	ImpressCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4271	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277911	-	magento	magento	The fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 does not restrict the stream wrapper used in a templat…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-3458	2024-11-21 11:29	2015-04-30	Show	GitHub Exploit DB Packet Storm

277912	-	magento	magento	Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentication via the forwarded parameter.	CWE-287 Improper Authentication	CVE-2015-3457	2024-11-21 11:29	2015-04-30	Show	GitHub Exploit DB Packet Storm

277913	-	rest-client_project	rest-client	REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.	CWE-200 Information Exposure	CVE-2015-3448	2024-11-21 11:29	2015-04-30	Show	GitHub Exploit DB Packet Storm

277914	-	sonicwall	sonicos	Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchS…	CWE-79 Cross-site Scripting	CVE-2015-3447	2024-11-21 11:29	2015-04-30	Show	GitHub Exploit DB Packet Storm

277915	-	xen suse fedoraproject debian opensuse	xen suse_linux_enterprise_server suse_linux_enterprise_software_development_kit suse_linux_enterprise_desktop fedora debian_linux linux_enterprise_software_development_kit linux_…	Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_g…	CWE-200 Information Exposure	CVE-2015-3340	2024-11-21 11:29	2015-04-28	Show	GitHub Exploit DB Packet Storm

277916	-	ffmpeg debian	ffmpeg debian_linux	Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other im…	NVD-CWE-Other	CVE-2015-3417	2024-11-21 11:29	2015-04-25	Show	GitHub Exploit DB Packet Storm

277917	-	canonical sqlite debian apple php	ubuntu_linux sqlite debian_linux mac_os_x watchos php	The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to caus…	CWE-190 Integer Overflow or Wraparound	CVE-2015-3416	2024-11-21 11:29	2015-04-25	Show	GitHub Exploit DB Packet Storm

277918	-	apple debian canonical sqlite php	watchos mac_os_x debian_linux ubuntu_linux sqlite php	The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free ope…	CWE-404 Improper Resource Shutdown or Release	CVE-2015-3415	2024-11-21 11:29	2015-04-25	Show	GitHub Exploit DB Packet Storm

277919	-	sqlite apple debian canonical php	sqlite watchos mac_os_x debian_linux ubuntu_linux php	SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and appli…	CWE-908 Use of Uninitialized Resource	CVE-2015-3414	2024-11-21 11:29	2015-04-25	Show	GitHub Exploit DB Packet Storm

277920	-	canonical debian point-to-point_protocol_project	ubuntu_linux debian_linux point-to-point_protocol	Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3310	2024-11-21 11:29	2015-04-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed