Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252181 4.9 警告 Linux
レッドハット
- Linux kernel の mm/huge_memory.c におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-0999 2011-06-28 10:01 2011-02-23 Show GitHub Exploit DB Packet Storm
252182 1.9 注意 Linux
レッドハット
- Linux kernel の arch/x86/kvm/x86.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3881 2011-06-28 09:53 2010-12-9 Show GitHub Exploit DB Packet Storm
252183 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 および 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1260 2011-06-27 16:23 2011-06-14 Show GitHub Exploit DB Packet Storm
252184 4.3 警告 マイクロソフト - Microsoft Internet Explorer 7 および 8 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1252 2011-06-27 16:22 2011-06-14 Show GitHub Exploit DB Packet Storm
252185 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1251 2011-06-27 16:21 2011-06-14 Show GitHub Exploit DB Packet Storm
252186 4.3 警告 マイクロソフト - Microsoft Internet Explorer 8 における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1246 2011-06-27 16:21 2011-06-14 Show GitHub Exploit DB Packet Storm
252187 4.3 警告 マイクロソフト - 複数の Microsoft 製品における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2011-1280 2011-06-27 16:19 2011-06-14 Show GitHub Exploit DB Packet Storm
252188 5 警告 マイクロソフト - Microsoft Windows の SMB サーバーにおけるサービス運用妨害 (システムハング) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1267 2011-06-27 16:18 2011-06-14 Show GitHub Exploit DB Packet Storm
252189 4.9 警告 マイクロソフト - Microsoft Windows Server 2008 Gold の Hyper-V におけるサービス運用妨害 (ホスト OS 無限ループ) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1872 2011-06-27 16:17 2011-06-14 Show GitHub Exploit DB Packet Storm
252190 7.2 危険 マイクロソフト - Microsoft Windows の Ancillary Function Driver における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1249 2011-06-27 16:16 2011-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276731 - facebook hiphop_virtual_machine Cross-site scripting (XSS) vulnerability in the WddxPacket::recursiveAddVar function in HHVM (aka the HipHop Virtual Machine) before 3.5.0 allows remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting
CVE-2014-9714 2024-11-21 11:21 2015-04-13 Show GitHub Exploit DB Packet Storm
276732 - openldap
debian
openldap
debian_linux
The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-9713 2024-11-21 11:21 2015-04-1 Show GitHub Exploit DB Packet Storm
276733 - oracle
embedthis
juniper
enterprise_communications_broker
appweb
junos
Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x… CWE-476
 NULL Pointer Dereference
CVE-2014-9708 2024-11-21 11:21 2015-03-31 Show GitHub Exploit DB Packet Storm
276734 - embedthis goahead EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (… CWE-17
Code
CVE-2014-9707 2024-11-21 11:21 2015-03-31 Show GitHub Exploit DB Packet Storm
276735 - debian
dulwich_project
debian_linux
dulwich
The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly … CWE-19
 Data Processing Errors
CVE-2014-9706 2024-11-21 11:21 2015-03-31 Show GitHub Exploit DB Packet Storm
276736 - php
opensuse
libgd
debian
canonical
php
opensuse
libgd
debian_linux
ubuntu_linux
The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and applicati… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9709 2024-11-21 11:21 2015-03-30 Show GitHub Exploit DB Packet Storm
276737 - php php Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute ar… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9705 2024-11-21 11:21 2015-03-30 Show GitHub Exploit DB Packet Storm
276738 - file_project
php
debian
file
php
debian_linux
readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of … CWE-20
 Improper Input Validation 
CVE-2014-9653 2024-11-21 11:21 2015-03-30 Show GitHub Exploit DB Packet Storm
276739 - php
file_project
php
file
The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain strin… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9652 2024-11-21 11:21 2015-03-30 Show GitHub Exploit DB Packet Storm
276740 - websense v-series_appliances Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path. CWE-200
Information Exposure
CVE-2014-9712 2024-11-21 11:21 2015-03-27 Show GitHub Exploit DB Packet Storm