Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252401	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2182	2010-11-30 14:00	2010-06-10	Show	GitHub Exploit DB Packet Storm

252402	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2181	2010-11-30 13:58	2010-06-10	Show	GitHub Exploit DB Packet Storm

252403	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2180	2010-11-30 13:57	2010-06-10	Show	GitHub Exploit DB Packet Storm

252404	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2179	2010-11-30 13:54	2010-06-10	Show	GitHub Exploit DB Packet Storm

252405	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2178	2010-11-30 13:53	2010-06-10	Show	GitHub Exploit DB Packet Storm

252406	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2177	2010-11-30 13:52	2010-06-10	Show	GitHub Exploit DB Packet Storm

252407	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2176	2010-11-30 13:49	2010-06-10	Show	GitHub Exploit DB Packet Storm

252408	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2175	2010-11-30 13:47	2010-06-10	Show	GitHub Exploit DB Packet Storm

252409	7.8	危険	アップル	-	Apple Mac OS X の Networking におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1843	2010-11-29 15:53	2010-11-16	Show	GitHub Exploit DB Packet Storm

252410	9.3	危険	アップル	-	Apple Mac OS X の AppKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1842	2010-11-29 15:47	2010-11-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
283171	-	async-http-client_project redhat	async-http-client jboss_fuse	main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC or async-http-client) before 1.9.0 does not require a hostname match during verification of X.509 certificates,…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2013-7398	2024-11-21 11:00	2015-06-25	Show	GitHub Exploit DB Packet Storm

283172	-	redhat async-http-client_project	jboss_fuse async-http-client	Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-th…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2013-7397	2024-11-21 11:00	2015-06-25	Show	GitHub Exploit DB Packet Storm

283173	-	kanaka	novnc	noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http sessi…	CWE-310 Cryptographic Issues	CVE-2013-7436	2024-11-21 11:00	2015-04-10	Show	GitHub Exploit DB Packet Storm

283174	-	pbm212030_project	pbm212030	Multiple buffer overflows in pbm212030 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PBM image, related to (1) stream line data, which t…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-7438	2024-11-21 11:00	2015-03-30	Show	GitHub Exploit DB Packet Storm

283175	-	icoasoft	potrace	Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.	CWE-190 Integer Overflow or Wraparound	CVE-2013-7437	2024-11-21 11:00	2015-03-30	Show	GitHub Exploit DB Packet Storm

283176	-	canonical debian linux oracle	ubuntu_linux debian_linux linux_kernel linux	The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different…	CWE-269 Improper Privilege Management	CVE-2013-7421	2024-11-21 11:00	2015-03-2	Show	GitHub Exploit DB Packet Storm

283177	-	redhat canonical opensuse gnu	enterprise_linux_server_aus ubuntu_linux opensuse glibc	The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended l…	CWE-17 Code	CVE-2013-7423	2024-11-21 11:00	2015-02-25	Show	GitHub Exploit DB Packet Storm

283178	-	kde	kde_applications	kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a co…	CWE-310 Cryptographic Issues	CVE-2013-7252	2024-11-21 11:00	2015-01-19	Show	GitHub Exploit DB Packet Storm

283179	-	hancom	hancom_office_2010_se	Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-7420	2024-11-21 11:00	2015-01-13	Show	GitHub Exploit DB Packet Storm

283180	-	joomlaskin	js_multi_hotel	Cross-site scripting (XSS) vulnerability in includes/refreshDate.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 for WordPress allows remote attackers to inje…	CWE-79 Cross-site Scripting	CVE-2013-7419	2024-11-21 11:00	2015-01-10	Show	GitHub Exploit DB Packet Storm