Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250961 5.7 警告 ヒューレット・パッカード - HP OpenVMS における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4110 2012-03-27 18:42 2010-12-14 Show GitHub Exploit DB Packet Storm
250962 4.3 警告 ヒューレット・パッカード - HP Palm webOS の Contacts Application におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4109 2012-03-27 18:42 2010-12-6 Show GitHub Exploit DB Packet Storm
250963 2.6 注意 OTRS プロジェクト - OTRS の AgentTicketZoom におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4071 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250964 6.8 警告 ヒューレット・パッカード - HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-4108 2012-03-27 18:42 2010-12-6 Show GitHub Exploit DB Packet Storm
250965 7.8 危険 ヒューレット・パッカード - 複数の HP プリンタ製品で使用される File System External Access 設定の PJL Access 値 のデフォルト設定における任意のファイルを読まれる脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4107 2012-03-27 18:42 2010-11-15 Show GitHub Exploit DB Packet Storm
250966 6.8 警告 ヒューレット・パッカード - HP Insight Control におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-4106 2012-03-27 18:42 2010-10-28 Show GitHub Exploit DB Packet Storm
250967 6.4 警告 ヒューレット・パッカード - HP Insight Orchestration におけるアクセス制限を回避する脆弱性 CWE-noinfo
情報不足 		CVE-2010-4105 2012-03-27 18:42 2010-10-28 Show GitHub Exploit DB Packet Storm
250968 5 警告 ヒューレット・パッカード - HP Insight Orchestration における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2010-4104 2012-03-27 18:42 2010-10-28 Show GitHub Exploit DB Packet Storm
250969 5 警告 ヒューレット・パッカード - HP Insight Managed System Setup Wizard における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2010-4103 2012-03-27 18:42 2010-10-28 Show GitHub Exploit DB Packet Storm
250970 5 警告 ヒューレット・パッカード - HP Insight Recovery における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2010-4102 2012-03-27 18:42 2010-10-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273301 9.8 CRITICAL
Network 		videowhisper video_conference The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2015-9271 2024-11-21 11:40 2018-10-5 Show GitHub Exploit DB Packet Storm
273302 6.1 MEDIUM
Network 		theholidaycalendar holiday_calendar XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter. CWE-79
Cross-site Scripting 		CVE-2015-9270 2024-11-21 11:40 2018-10-2 Show GitHub Exploit DB Packet Storm
273303 7.5 HIGH
Network 		wpmobilepack wordpress_mobile_pack The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a… CWE-200
Information Exposure 		CVE-2015-9269 2024-11-21 11:40 2018-10-2 Show GitHub Exploit DB Packet Storm
273304 7.8 HIGH
Local 		nullsoft
debian 		nullsoft_scriptable_install_system
debian_linux 		Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the depend… CWE-20
 Improper Input Validation  		CVE-2015-9268 2024-11-21 11:40 2018-10-1 Show GitHub Exploit DB Packet Storm
273305 5.5 MEDIUM
Local 		nullsoft
debian 		nullsoft_scriptable_install_system
debian_linux 		Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or th… CWE-269
 Improper Privilege Management 		CVE-2015-9267 2024-11-21 11:40 2018-10-1 Show GitHub Exploit DB Packet Storm
273306 9.8 CRITICAL
Network 		ui
ubnt 		airmax_ac_firmware
airmax_m_xm_firmware
airmax_m_xw_firmware
airmax_m_ti_firmware
airgateway_firmware
airfiber_af24_firmware
airfiber_af24hd_firmware
af5x_firmware
af5_firmwar… 		The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory t… CWE-22
Path Traversal 		CVE-2015-9266 2024-11-21 11:40 2018-09-6 Show GitHub Exploit DB Packet Storm
273307 9.8 CRITICAL
Network 		lansweeper lansweeper Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows service. CWE-20
 Improper Input Validation  		CVE-2015-9264 2024-11-21 11:40 2018-08-27 Show GitHub Exploit DB Packet Storm
273308 9.8 CRITICAL
Network 		idera uptime_infrastructure_monitor An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute a… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2015-9263 2024-11-21 11:40 2018-08-27 Show GitHub Exploit DB Packet Storm
273309 9.8 CRITICAL
Network 		debian
canonical
x
redhat 		debian_linux
ubuntu_linux
libxcursor
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
ansible_tower 		_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-9262 2024-11-21 11:40 2018-08-2 Show GitHub Exploit DB Packet Storm
273310 5.5 MEDIUM
Local 		busybox
debian
canonical 		busybox
debian_linux
ubuntu_linux 		huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file. CWE-476
 NULL Pointer Dereference 		CVE-2015-9261 2024-11-21 11:40 2018-07-27 Show GitHub Exploit DB Packet Storm