Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252271 6.8 警告 The PHP Group
アップル
サイバートラスト株式会社
レッドハット		 - PHP の utf8_decode 関数におけるクロスサイトスクリプティングおよび SQL インジェクションに対する保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3870 2011-04-4 14:29 2009-09-27 Show GitHub Exploit DB Packet Storm
252272 9.3 危険 アップル - Apple QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4009 2011-04-4 14:28 2010-12-9 Show GitHub Exploit DB Packet Storm
252273 6.8 警告 アップル
FreeType Project
オラクル		 - FreeType の ttinterp.c 内にある Ins_SHZ 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3814 2011-04-4 14:27 2010-11-26 Show GitHub Exploit DB Packet Storm
252274 9.3 危険 アップル - Apple QuickTime における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3802 2011-04-4 14:23 2010-12-9 Show GitHub Exploit DB Packet Storm
252275 9.3 危険 アップル - Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3801 2011-04-4 14:22 2010-12-9 Show GitHub Exploit DB Packet Storm
252276 4.3 警告 The PHP Group
アップル
レッドハット		 - PHP の filter_var 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3710 2011-04-4 14:20 2010-10-25 Show GitHub Exploit DB Packet Storm
252277 4.3 警告 The PHP Group
アップル
レッドハット		 - PHP の ZipArchive::getArchiveComment 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3709 2011-04-4 14:18 2010-11-9 Show GitHub Exploit DB Packet Storm
252278 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0150 2011-04-1 15:32 2011-03-3 Show GitHub Exploit DB Packet Storm
252279 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0149 2011-04-1 15:31 2011-03-3 Show GitHub Exploit DB Packet Storm
252280 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0148 2011-04-1 15:24 2011-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278981 - geniuscloud smart_browser The Smart Browser (aka smartbrowser.geniuscloud) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain … CWE-310
Cryptographic Issues 		CVE-2014-5809 2024-11-21 11:12 2014-09-22 Show GitHub Exploit DB Packet Storm
278982 - mr384 mzone_login The Mzone Login (aka com.mr384.MzoneLogin) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens… CWE-310
Cryptographic Issues 		CVE-2014-5665 2024-11-21 11:12 2014-09-22 Show GitHub Exploit DB Packet Storm
278983 - schneider-electric
aveva 		scada_expert_clearscada
clearscada 		Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryp… CWE-310
Cryptographic Issues 		CVE-2014-5413 2024-11-21 11:12 2014-09-18 Show GitHub Exploit DB Packet Storm
278984 - schneider-electric
aveva 		scada_expert_clearscada
clearscada 		Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-5412 2024-11-21 11:12 2014-09-18 Show GitHub Exploit DB Packet Storm
278985 - fatfreecrm fat_free_crm Multiple cross-site scripting (XSS) vulnerabilities in app/views/layouts/application.html.haml in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) … CWE-79
Cross-site Scripting 		CVE-2014-5441 2024-11-21 11:12 2014-09-12 Show GitHub Exploit DB Packet Storm
278986 - mpexsolutions mx-smartimer SQL injection vulnerability in Login.aspx in MPEX Business Solutions MX-SmartTimer before 13.19.18 allows remote attackers to execute arbitrary SQL commands via the ct100%24CPHContent%24password para… CWE-89
SQL Injection 		CVE-2014-5440 2024-11-21 11:12 2014-09-12 Show GitHub Exploit DB Packet Storm
278987 - tribulant tibulant_slideshow_gallery Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then a… CWE-20
 Improper Input Validation  		CVE-2014-5460 2024-11-21 11:12 2014-09-12 Show GitHub Exploit DB Packet Storm
278988 - phpwiki_project phpwiki The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp. NOTE: some of the… CWE-94
Code Injection 		CVE-2014-5519 2024-11-21 11:12 2014-09-11 Show GitHub Exploit DB Packet Storm
278989 - miniclip mini_pets The Mini Pets (aka com.miniclip.animalshelter) application 2.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain … CWE-310
Cryptographic Issues 		CVE-2014-5817 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
278990 - meipai meipai The MeiPai (aka com.meitu.meipaimv) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i… CWE-310
Cryptographic Issues 		CVE-2014-5816 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm