Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251021 9 危険 OpenVAS - OpenVAS Manager の email 関数における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0018 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
251022 2.1 注意 The Tor Project - Tor における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0016 2012-03-27 18:42 2011-01-17 Show GitHub Exploit DB Packet Storm
251023 5 警告 The Tor Project - Tor におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0015 2012-03-27 18:42 2011-01-17 Show GitHub Exploit DB Packet Storm
251024 4.3 警告 Best Practical Solutions - Best Practical Solutions RT における平分パスワードを判定される脆弱性 CWE-310
暗号の問題 		CVE-2011-0009 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
251025 6.9 警告 Todd C. Miller
レッドハット		 - Fedora の sudo の parse.c における root 権限を取得される脆弱性 CWE-DesignError
CVE-2011-0008 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
251026 3.3 注意 troglobit - pimd における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-0007 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
251027 4.3 警告 Joomla! - Joomla! の com_search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0005 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
251028 4.3 警告 Piwik - Piwik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0004 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
251029 6.9 警告 Exim Development - Exim の open_log 機能における任意のファイルにログデータをアペンドさせる脆弱性 CWE-20
CWE-59
CVE-2011-0017 2012-03-27 18:42 2010-06-12 Show GitHub Exploit DB Packet Storm
251030 5.8 警告 MediaWiki - MediaWiki におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0003 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282431 - fedoraproject
freetype
debian
opensuse
canonical 		fedora
freetype
debian_linux
opensuse
ubuntu_linux 		The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-b… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-9656 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
282432 - k7computing k7sentry.sys
anti-virus_plus
total_security
ultimate_security 		K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9643 2024-11-21 11:21 2015-02-7 Show GitHub Exploit DB Packet Storm
282433 - bullguard bdagent.sys
internet_security
online_backup
premium_protection 		bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain priv… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9642 2024-11-21 11:21 2015-02-7 Show GitHub Exploit DB Packet Storm
282434 - trendmicro tmeext.sys The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privile… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9641 2024-11-21 11:21 2015-02-7 Show GitHub Exploit DB Packet Storm
282435 - unzip_project
canonical
debian
fedoraproject 		unzip
ubuntu_linux
debian_linux
fedora 		unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip arc… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-9636 2024-11-21 11:21 2015-02-7 Show GitHub Exploit DB Packet Storm
282436 - avg protection
internet_security 		The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9632 2024-11-21 11:21 2015-02-7 Show GitHub Exploit DB Packet Storm
282437 - m2_technologies optimalsite Cross-site scripting (XSS) vulnerability in display_dialog.php in M2 OptimalSite 0.1 and 2.4 allows remote attackers to inject arbitrary web script or HTML via the image parameter. CWE-79
Cross-site Scripting 		CVE-2014-9562 2024-11-21 11:21 2015-02-5 Show GitHub Exploit DB Packet Storm
282438 - comodo backup The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9633 2024-11-21 11:21 2015-02-4 Show GitHub Exploit DB Packet Storm
282439 - fluxbb fluxbb Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a .. (dot dot) in the install_lang paramet… CWE-22
Path Traversal 		CVE-2014-9574 2024-11-21 11:21 2015-02-4 Show GitHub Exploit DB Packet Storm
282440 - voxpupuli rabbitmq puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as demonstrated by using Facter. CWE-200
Information Exposure 		CVE-2014-9568 2024-11-21 11:21 2015-02-4 Show GitHub Exploit DB Packet Storm