Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251971 9.3 危険 アップル
アドビシステムズ
レッドハット
オラクル
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-3645 2011-02-2 15:05 2010-11-4 Show GitHub Exploit DB Packet Storm
251972 10 危険 アドバンテック株式会社 - Advantech Studio Test Web Server にバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0488 2011-02-2 15:00 2011-01-13 Show GitHub Exploit DB Packet Storm
251973 10 危険 WellinTech - WellinTech KingView 6.53 にヒープオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0406 2011-02-2 14:59 2011-01-13 Show GitHub Exploit DB Packet Storm
251974 6.8 警告 PNG Development Group - libpng 1.5.0 の png_set_rgb_to_gray() 関数に脆弱性 CWE-189
数値処理の問題
CVE-2011-0408 2011-02-2 14:59 2011-01-12 Show GitHub Exploit DB Packet Storm
251975 5 警告 PolyVision - PolyVision RoomWizard に脆弱性 CWE-200
情報漏えい
CVE-2010-0214 2011-02-2 14:59 2011-01-11 Show GitHub Exploit DB Packet Storm
251976 5.1 警告 Opera Software ASA - Opera における実行ファイル読み込みに関する脆弱性 CWE-Other
その他
CVE-2011-0450 2011-02-2 14:02 2011-02-2 Show GitHub Exploit DB Packet Storm
251977 4.3 警告 株式会社ロックオン - EC-CUBE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0451 2011-02-2 14:01 2011-02-2 Show GitHub Exploit DB Packet Storm
251978 9.3 危険 アップル
アドビシステムズ
レッドハット
オラクル
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-3644 2011-02-1 16:29 2010-11-4 Show GitHub Exploit DB Packet Storm
251979 9.3 危険 アップル
アドビシステムズ
レッドハット
オラクル
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-3643 2011-02-1 16:28 2010-11-4 Show GitHub Exploit DB Packet Storm
251980 9.3 危険 アップル
アドビシステムズ
レッドハット
オラクル
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-3642 2011-02-1 16:27 2010-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267551 9.8 CRITICAL
Network
nettle_project
canonical
opensuse
nettle
ubuntu_linux
leap
opensuse
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allo… CWE-310
CWE-254
Cryptographic Issues
 7PK - Security Features
CVE-2015-8803 2024-11-21 11:39 2016-02-24 Show GitHub Exploit DB Packet Storm
267552 6.1 MEDIUM
Network
apache solr Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting
CVE-2015-8797 2024-11-21 11:39 2016-02-15 Show GitHub Exploit DB Packet Storm
267553 6.1 MEDIUM
Network
apache solr Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a craf… CWE-79
Cross-site Scripting
CVE-2015-8796 2024-11-21 11:39 2016-02-15 Show GitHub Exploit DB Packet Storm
267554 6.1 MEDIUM
Network
apache solr Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled duri… CWE-79
Cross-site Scripting
CVE-2015-8795 2024-11-21 11:39 2016-02-15 Show GitHub Exploit DB Packet Storm
267555 9.8 CRITICAL
Network
linux linux_kernel The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or… CWE-476
 NULL Pointer Dereference
CVE-2015-8787 2024-11-21 11:39 2016-02-8 Show GitHub Exploit DB Packet Storm
267556 6.2 MEDIUM
Local
linux
suse
linux_kernel
linux_enterprise_real_time_extension
The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero lengt… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2015-8785 2024-11-21 11:39 2016-02-8 Show GitHub Exploit DB Packet Storm
267557 6.2 MEDIUM
Local
linux
debian
canonical
linux_kernel
debian_linux
ubuntu_linux
net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a c… CWE-362
Race Condition
CVE-2015-8767 2024-11-21 11:39 2016-02-8 Show GitHub Exploit DB Packet Storm
267558 7.0 HIGH
Local
linux linux_kernel kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter th… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-8709 2024-11-21 11:39 2016-02-8 Show GitHub Exploit DB Packet Storm
267559 5.3 MEDIUM
Network
radicale radicale Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*". CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-8748 2024-11-21 11:39 2016-02-4 Show GitHub Exploit DB Packet Storm
267560 10.0 CRITICAL
Network
radicale radicale The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name. CWE-20
 Improper Input Validation 
CVE-2015-8747 2024-11-21 11:39 2016-02-4 Show GitHub Exploit DB Packet Storm