Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251931	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0153	2011-04-4 14:49	2011-03-3	Show	GitHub Exploit DB Packet Storm

251932	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0152	2011-04-4 14:47	2011-03-3	Show	GitHub Exploit DB Packet Storm

251933	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0151	2011-04-4 14:45	2011-03-3	Show	GitHub Exploit DB Packet Storm

251934	10	危険	Wireshark レッドハット	-	Wireshark の MAC-LTE 解析部におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0444	2011-04-4 14:38	2011-01-11	Show	GitHub Exploit DB Packet Storm

251935	5	警告	サイバートラスト株式会社 Wireshark レッドハットオラクル	-	Wireshark の BER 解析部の dissect_ber_unknown 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3445	2011-04-4 14:36	2010-10-11	Show	GitHub Exploit DB Packet Storm

251936	5	警告	The PHP Group アップル	-	PHP にサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-4409	2011-04-4 14:32	2010-12-1	Show	GitHub Exploit DB Packet Storm

251937	5	警告	The PHP Group アップル	-	PHP の IMAP 拡張 (ext/imap/php_imap.c) における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-4150	2011-04-4 14:31	2010-12-7	Show	GitHub Exploit DB Packet Storm

251938	6.8	警告	The PHP Group アップルサイバートラスト株式会社レッドハット	-	PHP の utf8_decode 関数におけるクロスサイトスクリプティングおよび SQL インジェクションに対する保護メカニズムを回避される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3870	2011-04-4 14:29	2009-09-27	Show	GitHub Exploit DB Packet Storm

251939	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4009	2011-04-4 14:28	2010-12-9	Show	GitHub Exploit DB Packet Storm

251940	6.8	警告	アップル FreeType Project オラクル	-	FreeType の ttinterp.c 内にある Ins_SHZ 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3814	2011-04-4 14:27	2010-11-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270151	-	cisco	identity_services_engine_software	The guest portal in Cisco Identity Services Engine (ISE) 3300 1.2(0.899) does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive information from custom…	CWE-287 Improper Authentication	CVE-2015-6266	2024-11-21 11:34	2015-08-29	Show	GitHub Exploit DB Packet Storm

270152	-	cisco	application_control_engine_4700	The CLI in Cisco Application Control Engine (ACE) 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-6265	2024-11-21 11:34	2015-08-27	Show	GitHub Exploit DB Packet Storm

270153	-	cisco	telepresence_video_communication_server_software	Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read configuration files by leveraging the Mobile an…	CWE-200 Information Exposure	CVE-2015-6261	2024-11-21 11:34	2015-08-26	Show	GitHub Exploit DB Packet Storm

270154	-	videolan	vlc_media_player	VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP file, which triggers the freeing of arbitrary pointe…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-5949	2024-11-21 11:34	2015-08-26	Show	GitHub Exploit DB Packet Storm

270155	-	cisco	prime_infrastructure	Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCum49054 a…	CWE-352 Origin Validation Error	CVE-2015-6262	2024-11-21 11:34	2015-08-25	Show	GitHub Exploit DB Packet Storm

270156	-	oracle wireshark	solaris wireshark	The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 …	CWE-20 Improper Input Validation	CVE-2015-6249	2024-11-21 11:34	2015-08-25	Show	GitHub Exploit DB Packet Storm

270157	-	oracle wireshark	solaris linux wireshark	The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attac…	CWE-20 Improper Input Validation	CVE-2015-6248	2024-11-21 11:34	2015-08-25	Show	GitHub Exploit DB Packet Storm

270158	-	oracle wireshark	solaris wireshark	The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 does not validate a certain offset value, which allows re…	CWE-20 Improper Input Validation	CVE-2015-6247	2024-11-21 11:34	2015-08-25	Show	GitHub Exploit DB Packet Storm

270159	-	oracle wireshark	solaris linux wireshark	The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause …	CWE-20 Improper Input Validation	CVE-2015-6246	2024-11-21 11:34	2015-08-25	Show	GitHub Exploit DB Packet Storm

270160	-	wireshark oracle	wireshark solaris linux	epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infin…	CWE-20 Improper Input Validation	CVE-2015-6245	2024-11-21 11:34	2015-08-25	Show	GitHub Exploit DB Packet Storm