Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252031 7.2 危険 GNU Project
VMware
サイバートラスト株式会社
レッドハット		 - GNU C library の ld.so における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3856 2011-01-25 15:48 2010-10-25 Show GitHub Exploit DB Packet Storm
252032 5.8 警告 Mozilla Foundation
オラクル		 - Mozilla Firefox の JavaScript 実装内にある js_InitRandom 関数におけるシード値を推測される脆弱性 CWE-310
暗号の問題 		CVE-2010-3400 2011-01-25 15:15 2010-09-15 Show GitHub Exploit DB Packet Storm
252033 4.3 警告 Mozilla Foundation
オラクル		 - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2117 2011-01-25 15:13 2010-06-1 Show GitHub Exploit DB Packet Storm
252034 6.8 警告 アップル - Apple Mac OS X における脆弱性に対するアップデート CWE-134
書式文字列の問題 		CVE-2010-4013 2011-01-25 15:10 2011-01-7 Show GitHub Exploit DB Packet Storm
252035 5 警告 GNU Project - GNU C Library の regcomp 実装におけるスタック消費の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4052 2011-01-21 16:37 2011-01-13 Show GitHub Exploit DB Packet Storm
252036 5 警告 GNU Project - GNU C Library の regcomp 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-4051 2011-01-21 16:35 2011-01-13 Show GitHub Exploit DB Packet Storm
252037 - - （複数のベンダ） - 侵入検知システム (IDS) および侵入防止システム (IPS) の機能を回避可能な問題 - - 2011-01-21 16:30 2010-12-16 Show GitHub Exploit DB Packet Storm
252038 6.9 警告 Ecava - Ecava IntegraXor における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-4599 2011-01-21 15:52 2010-12-17 Show GitHub Exploit DB Packet Storm
252039 5 警告 Ecava - Ecava IntegraXor におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4598 2011-01-21 15:38 2011-01-12 Show GitHub Exploit DB Packet Storm
252040 6.8 警告 Lunascape - Lunascape における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3927 2011-01-21 11:02 2011-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273161 6.5 MEDIUM
Network 		tuxfamily chrony chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service (i… NVD-CWE-Other
CVE-2015-1853 2024-11-21 11:26 2019-12-10 Show GitHub Exploit DB Packet Storm
273162 5.3 MEDIUM
Network 		cabextract_project cabextract cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character … CWE-22
Path Traversal 		CVE-2015-2060 2024-11-21 11:26 2019-11-30 Show GitHub Exploit DB Packet Storm
273163 5.9 MEDIUM
Network 		ruby-lang
debian
puppet 		ruby
trunk
debian_linux
puppet_enterprise
puppet_agent 		verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attacker… CWE-20
 Improper Input Validation  		CVE-2015-1855 2024-11-21 11:26 2019-11-30 Show GitHub Exploit DB Packet Storm
273164 6.5 MEDIUM
Network 		redhat virtualization
ovirt-engine 		oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center CWE-863
 Incorrect Authorization 		CVE-2015-1780 2024-11-21 11:26 2019-11-23 Show GitHub Exploit DB Packet Storm
273165 5.3 MEDIUM
Network 		linuxfoundation opendaylight The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveraging missing AAA restrictions. CWE-200
Information Exposure 		CVE-2015-1857 2024-11-21 11:26 2018-04-28 Show GitHub Exploit DB Packet Storm
273166 5.4 MEDIUM
Network 		ibm security_appscan Cross-site scripting (XSS) vulnerability in IBM AppScan Enterprise Edition 9.0.x before 9.0.2 iFix 001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Fo… CWE-79
Cross-site Scripting 		CVE-2015-1952 2024-11-21 11:26 2018-04-17 Show GitHub Exploit DB Packet Storm
273167 5.9 MEDIUM
Network 		redhat rhn-client-tools rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1 and Enterprise Linux (RHEL) 5, 6, and 7 does not properly validate hostnames in X.509 certificates from… CWE-295
Improper Certificate Validation  		CVE-2015-1777 2024-11-21 11:26 2018-04-13 Show GitHub Exploit DB Packet Storm
273168 5.3 MEDIUM
Network 		ibm websphere_mq IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-in-the-middle attack, related to duplication of message data… CWE-200
Information Exposure 		CVE-2015-1957 2024-11-21 11:26 2018-04-11 Show GitHub Exploit DB Packet Storm
273169 7.8 HIGH
Local 		ibm tivoli_directory_server The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before i… CWE-74
Injection 		CVE-2015-1975 2024-11-21 11:26 2018-04-4 Show GitHub Exploit DB Packet Storm
273170 9.8 CRITICAL
Network 		myscript myscript The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer t… CWE-502
 Deserialization of Untrusted Data 		CVE-2015-2020 2024-11-21 11:26 2018-03-30 Show GitHub Exploit DB Packet Storm