Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250971 4.9 警告 kernel.org - Linux-PAM の pam_sm_close_session 関数における意図しないファイルを削除する脆弱性 CWE-DesignError
CVE-2010-4706 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
250972 9.3 危険 FFmpeg - FFmpeg の vorbis_residue_decode_internal 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4705 2012-03-27 18:42 2011-01-22 Show GitHub Exploit DB Packet Storm
250973 4.3 警告 FFmpeg - FFmpeg の libavcodec/vorbis_dec.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4704 2012-03-27 18:42 2011-01-22 Show GitHub Exploit DB Packet Storm
250974 7.5 危険 hotwebscripts - HotWebScripts HotWeb Rentals の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4703 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250975 7.5 危険 fxwebdesign - Joomla! の JRadio (com_jradio) コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4702 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250976 5 警告 catb
レッドハット		 - gif2png の特定の Fedora パッチにおける想定しない PNG ファイルを作成される脆弱性 CWE-119
バッファエラー 		CVE-2010-4695 2012-03-27 18:42 2011-01-14 Show GitHub Exploit DB Packet Storm
250977 6.8 警告 catb - gif2png の gif2png.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4694 2012-03-27 18:42 2011-01-14 Show GitHub Exploit DB Packet Storm
250978 4.3 警告 Coppermine Photo Gallery - CPG におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4693 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
250979 7.8 危険 シスコシステムズ - Cisco ASA 5500 シリーズにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4674 2012-03-27 18:42 2011-01-7 Show GitHub Exploit DB Packet Storm
250980 7.8 危険 シスコシステムズ - Cisco ASA 5500 シリーズの IPv6 のNDプロトコル実装におけるサービス運用妨害 (DoS) 脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4670 2012-03-27 18:42 2011-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
287261 - canonical
libvirt 		ubuntu_linux
libvirt 		The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of serv… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-3633 2024-11-21 11:08 2014-10-6 Show GitHub Exploit DB Packet Storm
287262 - openstack nova The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into t… CWE-399
 Resource Management Errors 		CVE-2014-3608 2024-11-21 11:08 2014-10-6 Show GitHub Exploit DB Packet Storm
287263 - redhat conga The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-3521 2024-11-21 11:08 2014-10-6 Show GitHub Exploit DB Packet Storm
287264 - cisco webex_meetings_server Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344. CWE-200
Information Exposure 		CVE-2014-3400 2024-11-21 11:08 2014-10-5 Show GitHub Exploit DB Packet Storm
287265 - cisco adaptive_security_appliance_software The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain potentially sensitive software-version information by reading the verbose response dat… CWE-200
Information Exposure 		CVE-2014-3398 2024-11-21 11:08 2014-10-5 Show GitHub Exploit DB Packet Storm
287266 - cisco ios_xr
asr_9000_rsp440_router
asr_9001
asr_9006
asr_9010
asr_9904
asr_9912
asr_9922 		Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via t… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-3396 2024-11-21 11:08 2014-10-5 Show GitHub Exploit DB Packet Storm
287267 - openstack
canonical
redhat 		keystone
ubuntu_linux
openstack 		The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpo… CWE-200
Information Exposure 		CVE-2014-3621 2024-11-21 11:08 2014-10-2 Show GitHub Exploit DB Packet Storm
287268 - cisco webex_meetings_server Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343. CWE-20
 Improper Input Validation  		CVE-2014-3395 2024-11-21 11:08 2014-10-1 Show GitHub Exploit DB Packet Storm
287269 - redhat hibernate_validator ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-3558 2024-11-21 11:08 2014-09-30 Show GitHub Exploit DB Packet Storm
287270 - juniper junos_pulse_secure_access_service Cross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and 7.1 before 7.1r20 al… CWE-79
Cross-site Scripting 		CVE-2014-3824 2024-11-21 11:08 2014-09-29 Show GitHub Exploit DB Packet Storm