Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252441	5	警告	アップル	-	Apple Mac OS X の AFP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1828	2010-11-25 15:17	2010-11-15	Show	GitHub Exploit DB Packet Storm

252442	4.3	警告	アップル	-	Apple Mac OS X の Time Machine における重要な情報を取得される脆弱性	CWE-DesignError	CVE-2010-1803	2010-11-25 15:16	2010-11-15	Show	GitHub Exploit DB Packet Storm

252443	7.5	危険	アップル	-	Apple Mac OS X の OpenSSL における X.509 証明書の認証を回避される脆弱性	CWE-310 暗号の問題	CVE-2010-1378	2010-11-25 15:15	2010-11-12	Show	GitHub Exploit DB Packet Storm

252444	4.9	警告	アップル	-	Apple Mac OS X の hfs 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-0105	2010-11-25 15:15	2010-04-27	Show	GitHub Exploit DB Packet Storm

252445	9.3	危険	アップルアドビシステムズレッドハット	-	Adobe Flash の ActionScript の処理に脆弱性	CWE-94 コード・インジェクション	CVE-2010-0209	2010-11-25 15:14	2010-08-11	Show	GitHub Exploit DB Packet Storm

252446	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-399 CWE-noinfo	CVE-2009-3793	2010-11-25 15:13	2010-06-10	Show	GitHub Exploit DB Packet Storm

252447	6.8	警告	アップル GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	GNU gzip における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0001	2010-11-25 15:12	2010-01-29	Show	GitHub Exploit DB Packet Storm

252448	2.6	注意	アップルサン・マイクロシステムズ Apache Software Foundation	-	Apache HTTP Server 用 mod_perl の Status.pm におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0796	2010-11-25 15:12	2009-04-7	Show	GitHub Exploit DB Packet Storm

252449	6.8	警告	アップルサイバートラスト株式会社 WebDAV レッドハット	-	neon における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2474	2010-11-25 15:11	2009-08-18	Show	GitHub Exploit DB Packet Storm

252450	4.3	警告	アップルサイバートラスト株式会社 WebDAV レッドハット	-	neon におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2473	2010-11-25 15:11	2009-08-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
285011	-	redhat	jboss_operations_network	Red Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the (1) server and (2) agent configuration files, which allows local users to obtain authentication credentials and other un…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4452	2024-11-21 10:55	2013-12-25	Show	GitHub Exploit DB Packet Storm

285012	-	ffmpeg	ffmpeg	libavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to cause a denial of service (crash) via vectors related to alternating bit depths in H.264 data.	NVD-CWE-noinfo	CVE-2013-4358	2024-11-21 10:55	2013-12-25	Show	GitHub Exploit DB Packet Storm

285013	-	fedoraproject duckcorp	fedora bip	Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote …	CWE-310 Cryptographic Issues	CVE-2013-4550	2024-11-21 10:55	2013-12-25	Show	GitHub Exploit DB Packet Storm

285014	-	redhat	jboss_enterprise_portal_platform	Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2013-4424	2024-11-21 10:55	2013-12-24	Show	GitHub Exploit DB Packet Storm

285015	-	digia qt	qt	QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack.	CWE-20 Improper Input Validation	CVE-2013-4549	2024-11-21 10:55	2013-12-24	Show	GitHub Exploit DB Packet Storm

285016	-	redhat	enterprise_mrg	SQL injection vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to execute arbitrary SQL commands via vectors related to the "filtering table ope…	CWE-89 SQL Injection	CVE-2013-4461	2024-11-21 10:55	2013-12-24	Show	GitHub Exploit DB Packet Storm

285017	-	redhat	enterprise_mrg	Cross-site scripting (XSS) vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field…	CWE-79 Cross-site Scripting	CVE-2013-4414	2024-11-21 10:55	2013-12-24	Show	GitHub Exploit DB Packet Storm

285018	-	redhat	enterprise_mrg	Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of cumin users for uns…	CWE-352 Origin Validation Error	CVE-2013-4405	2024-11-21 10:55	2013-12-24	Show	GitHub Exploit DB Packet Storm

285019	-	redhat	enterprise_mrg	cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4404	2024-11-21 10:55	2013-12-24	Show	GitHub Exploit DB Packet Storm

285020	-	gnupg	gnupg	GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a …	CWE-255 Credentials Management	CVE-2013-4576	2024-11-21 10:55	2013-12-21	Show	GitHub Exploit DB Packet Storm