Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252231 5 警告 アップル - 複数の Apple 製品の WebKit における認証情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0160 2011-04-7 14:09 2011-03-11 Show GitHub Exploit DB Packet Storm
252232 4.7 警告 Linux
レッドハット		 - Linux kernel の kernel/trace/ftrace.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-3079 2011-04-7 13:49 2010-09-20 Show GitHub Exploit DB Packet Storm
252233 7.2 危険 Linux
レッドハット		 - Linux kernel の Direct Rendering Manager サブシステムの Intel i915 ドライバにおける権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2962 2011-04-7 13:44 2010-10-20 Show GitHub Exploit DB Packet Storm
252234 1.9 注意 Linux
レッドハット		 - Linux kernel の Direct Rendering Manager サブシステムの drm_ioctl 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2803 2011-04-7 13:43 2010-08-26 Show GitHub Exploit DB Packet Storm
252235 2.6 注意 アップル - Apple Safari のウインドウの機能における任意のローカルファイルが送信される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0169 2011-04-6 18:38 2011-03-11 Show GitHub Exploit DB Packet Storm
252236 7.8 危険 アップル - 複数の Apple 製品の Wi-Fi におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0162 2011-04-6 18:36 2011-03-11 Show GitHub Exploit DB Packet Storm
252237 4.3 警告 アップル - Apple Safari のウインドウの機能における任意のローカルファイルが送信される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0167 2011-04-6 18:01 2011-03-11 Show GitHub Exploit DB Packet Storm
252238 5.8 警告 アップル - Apple Safari の HTML5 ドラッグ＆ドロップの機能における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0166 2011-04-6 17:38 2011-03-11 Show GitHub Exploit DB Packet Storm
252239 5 警告 アップル - Apple iOS の Safari にある Safari 設定機能におけるユーザを追跡可能な脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0159 2011-04-6 17:34 2011-03-11 Show GitHub Exploit DB Packet Storm
252240 7.5 危険 アップル - Apple iOS の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0157 2011-04-6 17:29 2011-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276871 - huawei p7-l10_firmware The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9135 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
276872 - arris touchstone_tg862g\/ct_firmware ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access… CWE-255
Credentials Management 		CVE-2014-9406 2024-11-21 11:20 2014-12-19 Show GitHub Exploit DB Packet Storm
276873 - mantisbt mantisbt bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the handler_id parameter. CWE-284
Improper Access Control 		CVE-2014-9388 2024-11-21 11:20 2014-12-18 Show GitHub Exploit DB Packet Storm
276874 - sap businessobjects SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and gain privileges via a crafted CORBA call, aka SAP Note 2039905. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9387 2024-11-21 11:20 2014-12-18 Show GitHub Exploit DB Packet Storm
276875 - dokuwiki
mageia 		dokuwiki
mageia 		The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF… CWE-79
Cross-site Scripting 		CVE-2014-9253 2024-11-21 11:20 2014-12-18 Show GitHub Exploit DB Packet Storm
276876 7.8 HIGH
Local 		linux
redhat
canonical
opensuse
suse
google 		linux_kernel
enterprise_linux_eus
ubuntu_linux
evergreen
suse_linux_enterprise_server
android 		arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by tr… CWE-269
 Improper Privilege Management 		CVE-2014-9322 2024-11-21 11:20 2014-12-17 Show GitHub Exploit DB Packet Storm
276877 - manageengine netflow_analyzer Directory traversal vulnerability in the CollectorConfInfoServlet servlet in ManageEngine NetFlow Analyzer allows remote attackers to execute arbitrary code via a .. (dot dot) in the filename. CWE-22
Path Traversal 		CVE-2014-9373 2024-11-21 11:20 2014-12-17 Show GitHub Exploit DB Packet Storm
276878 - manageengine password_manager_pro Directory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password Manager Pro (PMP) before 7103 allows remote attackers to delete arbitrary files via a .. (dot dot) in… CWE-22
Path Traversal 		CVE-2014-9372 2024-11-21 11:20 2014-12-17 Show GitHub Exploit DB Packet Storm
276879 - zohocorp manageengine_desktop_central The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code via a crafted JSON object. CWE-20
 Improper Input Validation  		CVE-2014-9371 2024-11-21 11:20 2014-12-17 Show GitHub Exploit DB Packet Storm
276880 - docker docker Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation o… CWE-20
 Improper Input Validation  		CVE-2014-9358 2024-11-21 11:20 2014-12-17 Show GitHub Exploit DB Packet Storm