Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252261	6.8	警告	The GIMP Team レッドハット	-	GIMP の GFIG プラグインにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4542	2011-06-13 14:43	2011-01-7	Show	GitHub Exploit DB Packet Storm

252262	9.3	危険	The GIMP Team レッドハット	-	GIMP の SPHERE DESIGNER プラグインにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4541	2011-06-13 14:42	2011-01-7	Show	GitHub Exploit DB Packet Storm

252263	6.8	警告	The GIMP Team レッドハット	-	GIMP の "LIGHTING EFFECTS > LIGHT" プラグインにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4540	2011-06-13 14:41	2011-01-7	Show	GitHub Exploit DB Packet Storm

252264	10	危険	ISC, Inc. サイバートラスト株式会社ターボリナックスインターネットイニシアティブセンチュリー・システムズレッドハット	-	ISC DHCP dhclient におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0692	2011-06-10 10:04	2009-07-15	Show	GitHub Exploit DB Packet Storm

252265	5	警告	ISC, Inc. ターボリナックス	-	ISC DHCP にサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3616	2011-06-10 10:04	2010-12-14	Show	GitHub Exploit DB Packet Storm

252266	7.2	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の do_anonymous_page 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2240	2011-06-10 10:03	2010-08-30	Show	GitHub Exploit DB Packet Storm

252267	7.2	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の gdth_read_event 関数における権限昇格の脆弱性	CWE-Other その他	CVE-2009-3080	2011-06-10 10:03	2009-11-20	Show	GitHub Exploit DB Packet Storm

252268	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の net/ipv4/tcp_input.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1188	2011-06-10 10:02	2010-03-30	Show	GitHub Exploit DB Packet Storm

252269	7.8	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の e1000 ドライバにおけるパケットフィルタの制限を回避される脆弱性	CWE-189 数値処理の問題	CVE-2009-4536	2011-06-10 10:02	2010-01-12	Show	GitHub Exploit DB Packet Storm

252270	9.3	危険	Google	-	Google Chrome にて使用される WebKit の WebCore における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1772	2011-06-10 09:57	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274081	-	medicomp	medcin_engine	Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to (1) the SetG…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-2898	2024-11-21 11:28	2015-10-29	Show	GitHub Exploit DB Packet Storm

274082	-	polkit_project	polkit	The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer derefer…	NVD-CWE-Other	CVE-2015-3218	2024-11-21 11:28	2015-10-27	Show	GitHub Exploit DB Packet Storm

274083	-	datalex	airline_booking_software	Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfir…	NVD-CWE-Other	CVE-2015-2858	2024-11-21 11:28	2015-10-2	Show	GitHub Exploit DB Packet Storm

274084	-	h5ai_project	h5ai	Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request…	NVD-CWE-Other	CVE-2015-3203	2024-11-21 11:28	2015-09-29	Show	GitHub Exploit DB Packet Storm

274085	-	securifi	almond_firmware almond-2015_firmware	Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M unintentionally omit the X-Frame-Options HTTP header, which makes it easier …	CWE-20 Improper Input Validation	CVE-2015-2917	2024-11-21 11:28	2015-09-21	Show	GitHub Exploit DB Packet Storm

274086	-	securifi	almond-2015_firmware almond_firmware	Cross-site request forgery (CSRF) vulnerability on Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M allows remote attackers t…	CWE-352 Origin Validation Error	CVE-2015-2916	2024-11-21 11:28	2015-09-21	Show	GitHub Exploit DB Packet Storm

274087	-	securifi	almond_firmware almond-2015_firmware	Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote …	CWE-255 Credentials Management	CVE-2015-2915	2024-11-21 11:28	2015-09-21	Show	GitHub Exploit DB Packet Storm

274088	-	securifi	almond_firmware almond-2015_firmware	Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a fixed source-port number in outbound DNS queries performed on behalf o…	NVD-CWE-Other	CVE-2015-2914	2024-11-21 11:28	2015-09-21	Show	GitHub Exploit DB Packet Storm

274089	-	retrospect	retrospect_client retrospect	Retrospect and Retrospect Client before 10.0.2.119 on Windows, before 12.0.2.116 on OS X, and before 10.0.2.104 on Linux improperly generate password hashes, which makes it easier for remote attacker…	CWE-255 Credentials Management	CVE-2015-2864	2024-11-21 11:28	2015-09-21	Show	GitHub Exploit DB Packet Storm

274090	-	spice_project redhat	spice enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_hpc_node	Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or…	CWE-119 CWE-362 Incorrect Access of Indexable Resource ('Range Error') Race Condition	CVE-2015-3247	2024-11-21 11:28	2015-09-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed