Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252091 9.3 危険 サン・マイクロシステムズ
アドビシステムズ
日本電気
マイクロソフト
OpenOffice.org Project		 - Microsoft Visual Studio の ATL におけるオブジェクトのインスタンス化処理に関する任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2493 2011-01-14 14:32 2009-07-28 Show GitHub Exploit DB Packet Storm
252092 9.3 危険 マイクロソフト
アドビシステムズ
日本電気		 - Microsoft Visual Studio の ATL における未初期化オブジェクト処理に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0901 2011-01-14 14:31 2009-07-28 Show GitHub Exploit DB Packet Storm
252093 6.9 警告 マイクロソフト - Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3957 2011-01-13 16:22 2010-12-14 Show GitHub Exploit DB Packet Storm
252094 9.3 危険 マイクロソフト - Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3956 2011-01-13 16:19 2010-12-14 Show GitHub Exploit DB Packet Storm
252095 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3346 2011-01-13 16:15 2010-12-14 Show GitHub Exploit DB Packet Storm
252096 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3345 2011-01-13 16:11 2010-12-14 Show GitHub Exploit DB Packet Storm
252097 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3343 2011-01-13 15:48 2010-12-14 Show GitHub Exploit DB Packet Storm
252098 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3340 2011-01-13 15:43 2010-12-14 Show GitHub Exploit DB Packet Storm
252099 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の Advanced Audio Coding におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4395 2011-01-12 15:29 2010-12-10 Show GitHub Exploit DB Packet Storm
252100 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の RealPix におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4394 2011-01-12 15:23 2010-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297581 - google chrome_os Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2169 2024-11-21 10:27 2011-05-25 Show GitHub Exploit DB Packet Storm
297582 - openbsd openbsd Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspecified impact via a crafted string, related to the GLOB_APP… CWE-189
Numeric Errors 		CVE-2011-2168 2024-11-21 10:27 2011-05-25 Show GitHub Exploit DB Packet Storm
297583 - dovecot dovecot script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a scrip… CWE-22
Path Traversal 		CVE-2011-2167 2024-11-21 10:27 2011-05-25 Show GitHub Exploit DB Packet Storm
297584 - dovecot dovecot script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveragin… CWE-16
Configuration 		CVE-2011-2166 2024-11-21 10:27 2011-05-25 Show GitHub Exploit DB Packet Storm
297585 - dovecot dovecot lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of se… CWE-20
 Improper Input Validation  		CVE-2011-1929 2024-11-21 10:27 2011-05-25 Show GitHub Exploit DB Packet Storm
297586 - apache apr-util
http_server 		The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infi… CWE-399
 Resource Management Errors 		CVE-2011-1928 2024-11-21 10:27 2011-05-25 Show GitHub Exploit DB Packet Storm
297587 - watchguard xcs The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2165 2024-11-21 10:27 2011-05-24 Show GitHub Exploit DB Packet Storm
297588 - cmu cyrus_imap_server The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-1926 2024-11-21 10:27 2011-05-24 Show GitHub Exploit DB Packet Storm
297589 - netbsd
ihji 		netbsd
pmake 		The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, re… CWE-59
Link Following 		CVE-2011-1920 2024-11-21 10:27 2011-05-24 Show GitHub Exploit DB Packet Storm
297590 - mediawiki mediawiki includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypa… CWE-287
Improper Authentication 		CVE-2011-1766 2024-11-21 10:27 2011-05-24 Show GitHub Exploit DB Packet Storm