Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252401	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2182	2010-11-30 14:00	2010-06-10	Show	GitHub Exploit DB Packet Storm

252402	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2181	2010-11-30 13:58	2010-06-10	Show	GitHub Exploit DB Packet Storm

252403	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2180	2010-11-30 13:57	2010-06-10	Show	GitHub Exploit DB Packet Storm

252404	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2179	2010-11-30 13:54	2010-06-10	Show	GitHub Exploit DB Packet Storm

252405	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2178	2010-11-30 13:53	2010-06-10	Show	GitHub Exploit DB Packet Storm

252406	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2177	2010-11-30 13:52	2010-06-10	Show	GitHub Exploit DB Packet Storm

252407	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2176	2010-11-30 13:49	2010-06-10	Show	GitHub Exploit DB Packet Storm

252408	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2175	2010-11-30 13:47	2010-06-10	Show	GitHub Exploit DB Packet Storm

252409	7.8	危険	アップル	-	Apple Mac OS X の Networking におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1843	2010-11-29 15:53	2010-11-16	Show	GitHub Exploit DB Packet Storm

252410	9.3	危険	アップル	-	Apple Mac OS X の AppKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1842	2010-11-29 15:47	2010-11-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269691	-	migrate_project	migrate	Cross-site scripting (XSS) vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrate_ui submodule is enabled, allows user-assisted remote attackers to inject arbitrary w…	CWE-79 Cross-site Scripting	CVE-2015-5514	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

269692	-	niif	shibboleth_authentication	Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x before 7.x-4.2 for Drupal allows remote authenticated users with the "Administer bl…	CWE-79 Cross-site Scripting	CVE-2015-5513	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

269693	-	me_aliases_project	me_aliases	The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access Views using the "me" user argument handler by substituting "me" for a user id in …	CWE-284 Improper Access Control	CVE-2015-5512	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

269694	-	hybridauth_social_login_project	hybridauth_social_login	The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user registration by administrator only configuration and create an account via a social lo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5511	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

269695	-	content_construction_kit_project	content_construction_kit	Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via …	NVD-CWE-Other	CVE-2015-5510	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

269696	-	administration_views_project	administration_views	The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5509	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

269697	-	the_extensible_catalog_drupal_toolkit_project	the_extensible_catalog_drupal_toolkit	Cross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible Catalog (XC) Drupal Toolkit allows remote attackers to hijack the authentication of users with the "ad…	CWE-352 Origin Validation Error	CVE-2015-5508	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

269698	-	inline_entity_form_project	inline_entity_form	Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitr…	CWE-79 Cross-site Scripting	CVE-2015-5507	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

269699	-	apache_solr_real-time_project	apache_solr_real-time	The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content …	CWE-200 Information Exposure	CVE-2015-5506	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

269700	-	codfront_labs	http_strict_transport_security	The HTTP Strict Transport Security (HSTS) module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the "include subdomains" directive, which causes the HSTS pol…	CWE-17 Code	CVE-2015-5505	2024-11-21 11:33	2015-08-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed