Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252261	6.4	警告	ヒューレット・パッカードレッドハット日立オラクル	-	Oracle Sun Products Suite の Oracle Communications Messaging Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3564	2010-12-16 15:22	2010-10-12	Show	GitHub Exploit DB Packet Storm

252262	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-DesignError	CVE-2010-3817	2010-12-16 14:18	2010-11-22	Show	GitHub Exploit DB Packet Storm

252263	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3816	2010-12-16 14:18	2010-11-22	Show	GitHub Exploit DB Packet Storm

252264	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3811	2010-12-16 14:16	2010-11-22	Show	GitHub Exploit DB Packet Storm

252265	5	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP のセッションシリアライザにおける任意のセッション変数に変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3065	2010-12-15 15:28	2010-05-31	Show	GitHub Exploit DB Packet Storm

252266	5	警告	日立	-	JP1/NETM 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-12-15 15:27	2010-07-30	Show	GitHub Exploit DB Packet Storm

252267	5	警告	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1917	2010-12-15 15:27	2010-05-11	Show	GitHub Exploit DB Packet Storm

252268	5	警告	The PHP Group アップルターボリナックスサイバートラスト株式会社レッドハット	-	PHP の xmlrpc 拡張におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0397	2010-12-15 15:27	2010-03-16	Show	GitHub Exploit DB Packet Storm

252269	6.4	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP の Linear Congruential Generator における値を推測される脆弱性	CWE-310 暗号の問題	CVE-2010-1128	2010-12-15 15:26	2010-03-26	Show	GitHub Exploit DB Packet Storm

252270	6.9	警告	GNU Project 日本電気ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Libtool の libltdl における権限昇格の脆弱性	CWE-DesignError	CVE-2009-3736	2010-12-15 15:26	2009-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267511	5.5	MEDIUM Local	huawei	gem-703l_firmware ale_firmware	The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100…	CWE-20 Improper Input Validation	CVE-2015-8226	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

267512	5.5	MEDIUM Local	huawei	gem-703l_firmware ale_firmware	The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100…	CWE-20 Improper Input Validation	CVE-2015-8225	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

267513	9.8	CRITICAL Network	progress	whatsup_gold	The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks vi…	CWE-89 SQL Injection	CVE-2015-8261	2024-11-21 11:38	2016-01-8	Show	GitHub Exploit DB Packet Storm

267514	3.5	LOW Network	mozilla	bugzilla	Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain…	CWE-200 Information Exposure	CVE-2015-8509	2024-11-21 11:38	2016-01-3	Show	GitHub Exploit DB Packet Storm

267515	4.7	MEDIUM Network	mozilla	bugzilla	Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot conf…	CWE-79 Cross-site Scripting	CVE-2015-8508	2024-11-21 11:38	2016-01-3	Show	GitHub Exploit DB Packet Storm

267516	6.5	MEDIUM Network	zte	zxhn_h108n_r1a_firmware zxv10_w300_firmware	ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials…	CWE-200 Information Exposure	CVE-2015-8703	2024-11-21 11:38	2015-12-30	Show	GitHub Exploit DB Packet Storm

267517	7.5	HIGH Network	samba debian canonical	samba debian_linux ubuntu_linux	The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative…	CWE-269 Improper Privilege Management	CVE-2015-8467	2024-11-21 11:38	2015-12-30	Show	GitHub Exploit DB Packet Storm

267518	8.8	HIGH Network	adobe	air_sdk air_sdk_\&_compiler flash_player air	Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S…	NVD-CWE-Other	CVE-2015-8650	2024-11-21 11:38	2015-12-29	Show	GitHub Exploit DB Packet Storm

267519	8.8	HIGH Network	adobe	flash_player air_sdk air_sdk_\&_compiler air	Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S…	NVD-CWE-Other	CVE-2015-8649	2024-11-21 11:38	2015-12-29	Show	GitHub Exploit DB Packet Storm

267520	8.8	HIGH Network	adobe	air flash_player air_sdk air_sdk_\&_compiler	Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S…	NVD-CWE-Other	CVE-2015-8648	2024-11-21 11:38	2015-12-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed