Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250961	5.7	警告	ヒューレット・パッカード	-	HP OpenVMS における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-4110	2012-03-27 18:42	2010-12-14	Show	GitHub Exploit DB Packet Storm

250962	4.3	警告	ヒューレット・パッカード	-	HP Palm webOS の Contacts Application におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4109	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

250963	2.6	注意	OTRS プロジェクト	-	OTRS の AgentTicketZoom におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4071	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250964	6.8	警告	ヒューレット・パッカード	-	HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-4108	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

250965	7.8	危険	ヒューレット・パッカード	-	複数の HP プリンタ製品で使用される File System External Access 設定の PJL Access 値のデフォルト設定における任意のファイルを読まれる脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4107	2012-03-27 18:42	2010-11-15	Show	GitHub Exploit DB Packet Storm

250966	6.8	警告	ヒューレット・パッカード	-	HP Insight Control におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4106	2012-03-27 18:42	2010-10-28	Show	GitHub Exploit DB Packet Storm

250967	6.4	警告	ヒューレット・パッカード	-	HP Insight Orchestration におけるアクセス制限を回避する脆弱性	CWE-noinfo 情報不足	CVE-2010-4105	2012-03-27 18:42	2010-10-28	Show	GitHub Exploit DB Packet Storm

250968	5	警告	ヒューレット・パッカード	-	HP Insight Orchestration における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-4104	2012-03-27 18:42	2010-10-28	Show	GitHub Exploit DB Packet Storm

250969	5	警告	ヒューレット・パッカード	-	HP Insight Managed System Setup Wizard における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-4103	2012-03-27 18:42	2010-10-28	Show	GitHub Exploit DB Packet Storm

250970	5	警告	ヒューレット・パッカード	-	HP Insight Recovery における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-4102	2012-03-27 18:42	2010-10-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286891	-	caldera	caldera	Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php.	CWE-89 SQL Injection	CVE-2014-2934	2024-11-21 11:07	2014-05-8	Show	GitHub Exploit DB Packet Storm

286892	-	caldera	caldera	Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname.	CWE-22 Path Traversal	CVE-2014-2933	2024-11-21 11:07	2014-05-8	Show	GitHub Exploit DB Packet Storm

286893	-	xen	xen	The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separa…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3124	2024-11-21 11:07	2014-05-7	Show	GitHub Exploit DB Packet Storm

286894	-	opensuse nagios	opensuse remote_plugin_executor	Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor (NRPE) 2.15 and earlier allows remote attackers to execute arbitrary commands via a newline character in the -a option to…	NVD-CWE-Other	CVE-2014-2913	2024-11-21 11:07	2014-05-7	Show	GitHub Exploit DB Packet Storm

286895	-	debian strongswan	strongswan	strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload.	NVD-CWE-Other	CVE-2014-2891	2024-11-21 11:07	2014-05-7	Show	GitHub Exploit DB Packet Storm

286896	-	ayatana_project canonical	unity ubuntu_linux	Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3204	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm

286897	-	ayatana_project canonical	unity ubuntu_linux	Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and ex…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3203	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm

286898	-	ayatana_project	unity	Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3202	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm

286899	-	f5	big-iq	F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter in a request to the user's page in mgmt/shared/auth…	CWE-255 Credentials Management	CVE-2014-3220	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm

286900	-	phplist	phplist	Cross-site request forgery (CSRF) vulnerability in the subscription page editor (spageedit) in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a reques…	CWE-352 Origin Validation Error	CVE-2014-2916	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm