Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252231 5 警告 JSecurity
Apache Software Foundation		 - Apache Shiro および JSecurity におけるアクセス制限を回避される脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3863 2011-06-10 09:52 2010-11-5 Show GitHub Exploit DB Packet Storm
252232 4.3 警告 Apache Software Foundation - Apache CouchDB の Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3854 2011-06-10 09:52 2011-01-28 Show GitHub Exploit DB Packet Storm
252233 4.3 警告 The Dojo Foundation
Apache Software Foundation		 - Apache Struts などで利用される Dojo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6726 2011-06-10 09:51 2009-04-9 Show GitHub Exploit DB Packet Storm
252234 4.3 警告 Apache Software Foundation - Apache Struts の LookupDispatchAction、DispatchAction および ActionDispatcher におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-1548 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
252235 7.8 危険 Apache Software Foundation - Apache Struts (with BeanUtils) の ActionForm におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-1547 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
252236 4.3 警告 Apache Software Foundation
レッドハット		 - Apache Struts におけるクロスサイトスクリプティングの脆弱性 - CVE-2005-3745 2011-06-10 09:49 2005-11-22 Show GitHub Exploit DB Packet Storm
252237 4.6 警告 Linux
レッドハット		 - Linux kernel の bond_select_queue 関数におけるサービス運用妨害 (DoS）の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1581 2011-06-9 10:31 2011-05-18 Show GitHub Exploit DB Packet Storm
252238 10 危険 Google
レッドハット		 - Google Chrome におけるアドレスバーを偽装される脆弱性 CWE-DesignError
CVE-2010-3115 2011-06-9 10:30 2010-08-19 Show GitHub Exploit DB Packet Storm
252239 10 危険 Google
レッドハット		 - Google Chrome の text-editing 実装における脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3114 2011-06-9 10:30 2010-08-19 Show GitHub Exploit DB Packet Storm
252240 10 危険 Google
レッドハット		 - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-3113 2011-06-9 10:29 2010-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276731 - lexmark markvision_enterprise Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. (dot dot)… CWE-22
Path Traversal 		CVE-2014-9375 2024-11-21 11:20 2015-02-17 Show GitHub Exploit DB Packet Storm
276732 - ge
mactek 		svi_ii_ap_positioner_device_type_manager
12400_level_transmitter_device_type_manager
vector_device_type_manager
bullet_device_type_manager 		Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-9203 2024-11-21 11:20 2015-02-8 Show GitHub Exploit DB Packet Storm
276733 - netapp oncommand_balance NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage. CWE-200
Information Exposure 		CVE-2014-9354 2024-11-21 11:20 2015-02-6 Show GitHub Exploit DB Packet Storm
276734 - netapp oncommand_balance NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9353 2024-11-21 11:20 2015-02-6 Show GitHub Exploit DB Packet Storm
276735 - owncloud owncloud The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method. CWE-200
Information Exposure 		CVE-2014-9049 2024-11-21 11:20 2015-02-5 Show GitHub Exploit DB Packet Storm
276736 - owncloud owncloud The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9048 2024-11-21 11:20 2015-02-5 Show GitHub Exploit DB Packet Storm
276737 - owncloud owncloud Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors. NVD-CWE-noinfo
CVE-2014-9047 2024-11-21 11:20 2015-02-5 Show GitHub Exploit DB Packet Storm
276738 - owncloud owncloud The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol. CWE-200
Information Exposure 		CVE-2014-9046 2024-11-21 11:20 2015-02-5 Show GitHub Exploit DB Packet Storm
276739 - owncloud owncloud The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted password. CWE-287
Improper Authentication 		CVE-2014-9045 2024-11-21 11:20 2015-02-5 Show GitHub Exploit DB Packet Storm
276740 - owncloud owncloud Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain … CWE-200
Information Exposure 		CVE-2014-9044 2024-11-21 11:20 2015-02-5 Show GitHub Exploit DB Packet Storm