Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252071	7.2	危険	マイクロソフト	-	複数の Microsoft 製品の Consent User Interface における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3961	2011-01-17 15:06	2010-12-14	Show	GitHub Exploit DB Packet Storm

252072	7.2	危険	マイクロソフト	-	Microsoft Windows 製品の Routing and Remote Access NDProxy コンポーネントにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3963	2011-01-17 15:03	2010-12-14	Show	GitHub Exploit DB Packet Storm

252073	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3944	2011-01-17 14:45	2010-12-14	Show	GitHub Exploit DB Packet Storm

252074	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3943	2011-01-17 14:38	2010-12-14	Show	GitHub Exploit DB Packet Storm

252075	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2010-3942	2011-01-17 14:35	2010-12-14	Show	GitHub Exploit DB Packet Storm

252076	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3941	2011-01-17 14:29	2010-12-14	Show	GitHub Exploit DB Packet Storm

252077	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3940	2011-01-14 15:55	2010-12-14	Show	GitHub Exploit DB Packet Storm

252078	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3939	2011-01-14 15:53	2010-12-14	Show	GitHub Exploit DB Packet Storm

252079	9.3	危険	マイクロソフト	-	Microsoft Windows の Internet Connection Signup Wizard における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3144	2011-01-14 15:49	2010-12-14	Show	GitHub Exploit DB Packet Storm

252080	9.3	危険	マイクロソフト	-	Windows Address Book の wab.exe における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3147	2011-01-14 15:47	2010-12-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
272231	-	goautodial	goadmin_ce	Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.x before 3.3-1421902800 allows remote attackers to execute …	NVD-CWE-Other	CVE-2015-2842	2024-11-21 11:28	2015-05-13	Show	GitHub Exploit DB Packet Storm

272232	-	citrix	netscaler_gateway_firmware netscaler_application_delivery_controller_firmware	Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service (reboot…	NVD-CWE-noinfo	CVE-2015-2829	2024-11-21 11:28	2015-05-13	Show	GitHub Exploit DB Packet Storm

272233	-	owncloud	owncloud	ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as…	CWE-74 Injection	CVE-2015-3013	2024-11-21 11:28	2015-05-8	Show	GitHub Exploit DB Packet Storm

272234	-	debian kogmbh	debian_linux webodf	Multiple cross-site scripting (XSS) vulnerabilities in WebODF before 0.5.5, as used in ownCloud, allow remote attackers to inject arbitrary web script or HTML via a (1) style or (2) font name or (3) …	CWE-79 Cross-site Scripting	CVE-2015-3012	2024-11-21 11:28	2015-05-8	Show	GitHub Exploit DB Packet Storm

272235	-	owncloud debian	owncloud debian_linux	Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated u…	CWE-79 Cross-site Scripting	CVE-2015-3011	2024-11-21 11:28	2015-05-8	Show	GitHub Exploit DB Packet Storm

272236	-	oracle haxx canonical apple debian	enterprise_manager_ops_center libcurl curl ubuntu_linux mac_os_x debian_linux	The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information…	CWE-200 Information Exposure	CVE-2015-3153	2024-11-21 11:28	2015-05-2	Show	GitHub Exploit DB Packet Storm

272237	-	xiph debian opensuse	icecast debian_linux opensuse	Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without log…	NVD-CWE-Other	CVE-2015-3026	2024-11-21 11:28	2015-04-30	Show	GitHub Exploit DB Packet Storm

272238	-	fedoraproject canonical debian apple haxx hp opensuse	fedora ubuntu_linux debian_linux mac_os_x libcurl system_management_homepage curl opensuse	cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.	CWE-284 Improper Access Control	CVE-2015-3148	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

272239	-	fedoraproject canonical debian haxx apple oracle hp opensuse	fedora ubuntu_linux debian_linux curl mac_os_x solaris libcurl system_management_homepage opensuse	The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3145	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

272240	-	oracle haxx canonical debian	mysql_enterprise_monitor curl libcurl ubuntu_linux debian_linux	The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3144	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm