Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251881 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンの Ogg reader におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-2992 2011-09-5 10:53 2011-08-16 Show GitHub Exploit DB Packet Storm
251882 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-2991 2011-09-5 10:51 2011-08-16 Show GitHub Exploit DB Packet Storm
251883 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-2989 2011-09-5 10:39 2011-08-16 Show GitHub Exploit DB Packet Storm
251884 6.9 警告 サイバートラスト株式会社
シトリックス・システムズ
レッドハット
- Xen の tools/libxc/xc_dom_bzimageloader.c における複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-1583 2011-09-2 14:27 2011-05-9 Show GitHub Exploit DB Packet Storm
251885 7.8 危険 ISC, Inc.
レッドハット
- ISC DHCP サーバにおけるサービス運用妨害 (dhcp デーモンの停止) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-2749 2011-09-2 14:26 2011-07-27 Show GitHub Exploit DB Packet Storm
251886 6.8 警告 GTK+ - GTK+ における DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2010-4831 2011-09-2 12:04 2011-09-2 Show GitHub Exploit DB Packet Storm
251887 4.3 警告 ジュニパーネットワークス - Juniper Networks IDP ACM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-5086 2011-09-2 12:03 2011-09-2 Show GitHub Exploit DB Packet Storm
251888 5.8 警告 Sage - Sage において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4102 2011-09-2 12:03 2011-09-2 Show GitHub Exploit DB Packet Storm
251889 5.8 警告 Sage - Sage において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3384 2011-09-2 12:03 2011-09-2 Show GitHub Exploit DB Packet Storm
251890 2.6 注意 Phorum - Phorum における複数の脆弱性 CWE-352
CWE-79
CVE-2011-3381
CVE-2011-3382
2011-09-2 12:00 2011-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277051 9.8 CRITICAL
Network
atutor atutor confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_login parameter. CWE-287
Improper Authentication
CVE-2014-9753 2024-11-21 11:21 2020-02-12 Show GitHub Exploit DB Packet Storm
277052 8.1 HIGH
Network
libuv
nodejs
libuv
node.js
The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cau… CWE-362
Race Condition
CVE-2014-9748 2024-11-21 11:21 2020-02-12 Show GitHub Exploit DB Packet Storm
277053 9.8 CRITICAL
Network
nwjs nw A vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames, which has an unspecified impact. NVD-CWE-noinfo
CVE-2014-9530 2024-11-21 11:21 2020-02-8 Show GitHub Exploit DB Packet Storm
277054 7.8 HIGH
Local
videolan vlc_media_player The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size determined by arbitrary input data, which … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9630 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
277055 7.8 HIGH
Local
videolan vlc_media_player Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and… CWE-120
Classic Buffer Overflow
CVE-2014-9629 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
277056 7.8 HIGH
Local
videolan vlc_media_player The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow a… CWE-120
Classic Buffer Overflow
CVE-2014-9628 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
277057 7.8 HIGH
Local
videolan vlc_media_player The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows re… CWE-704
 Incorrect Type Conversion or Cast
CVE-2014-9627 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
277058 7.8 HIGH
Local
videolan vlc_media_player Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unsp… CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2014-9626 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
277059 7.8 HIGH
Local
videolan vlc_media_player The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remot… CWE-120
Classic Buffer Overflow
CVE-2014-9625 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm
277060 6.5 MEDIUM
Network
tornadoweb tornado Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determi… CWE-203
 Information Exposure Through Discrepancy
CVE-2014-9720 2024-11-21 11:21 2020-01-25 Show GitHub Exploit DB Packet Storm