Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252661	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の TextXtra.x32 モジュールにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2879	2010-09-13 15:45	2010-08-24	Show	GitHub Exploit DB Packet Storm

252662	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の DIRAPIX.dll における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2878	2010-09-13 15:45	2010-08-24	Show	GitHub Exploit DB Packet Storm

252663	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2877	2010-09-13 15:45	2010-08-24	Show	GitHub Exploit DB Packet Storm

252664	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2876	2010-09-13 15:44	2010-08-24	Show	GitHub Exploit DB Packet Storm

252665	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2010-2875	2010-09-13 15:44	2010-08-24	Show	GitHub Exploit DB Packet Storm

252666	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2874	2010-09-13 15:44	2010-08-24	Show	GitHub Exploit DB Packet Storm

252667	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2873	2010-09-13 15:43	2010-08-24	Show	GitHub Exploit DB Packet Storm

252668	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2872	2010-09-10 15:17	2010-08-24	Show	GitHub Exploit DB Packet Storm

252669	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の 3D オブジェクト関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2871	2010-09-10 15:17	2010-08-24	Show	GitHub Exploit DB Packet Storm

252670	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の DIRAPIX.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2870	2010-09-10 15:17	2010-08-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
271291	-	owncloud	owncloud	ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as…	CWE-74 Injection	CVE-2015-3013	2024-11-21 11:28	2015-05-8	Show	GitHub Exploit DB Packet Storm

271292	-	debian kogmbh	debian_linux webodf	Multiple cross-site scripting (XSS) vulnerabilities in WebODF before 0.5.5, as used in ownCloud, allow remote attackers to inject arbitrary web script or HTML via a (1) style or (2) font name or (3) …	CWE-79 Cross-site Scripting	CVE-2015-3012	2024-11-21 11:28	2015-05-8	Show	GitHub Exploit DB Packet Storm

271293	-	owncloud debian	owncloud debian_linux	Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated u…	CWE-79 Cross-site Scripting	CVE-2015-3011	2024-11-21 11:28	2015-05-8	Show	GitHub Exploit DB Packet Storm

271294	-	oracle haxx canonical apple debian	enterprise_manager_ops_center libcurl curl ubuntu_linux mac_os_x debian_linux	The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information…	CWE-200 Information Exposure	CVE-2015-3153	2024-11-21 11:28	2015-05-2	Show	GitHub Exploit DB Packet Storm

271295	-	xiph debian opensuse	icecast debian_linux opensuse	Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without log…	NVD-CWE-Other	CVE-2015-3026	2024-11-21 11:28	2015-04-30	Show	GitHub Exploit DB Packet Storm

271296	-	fedoraproject canonical debian apple haxx hp opensuse	fedora ubuntu_linux debian_linux mac_os_x libcurl system_management_homepage curl opensuse	cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.	CWE-284 Improper Access Control	CVE-2015-3148	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

271297	-	fedoraproject canonical debian haxx apple oracle hp opensuse	fedora ubuntu_linux debian_linux curl mac_os_x solaris libcurl system_management_homepage opensuse	The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3145	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

271298	-	oracle haxx canonical debian	mysql_enterprise_monitor curl libcurl ubuntu_linux debian_linux	The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3144	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

271299	-	haxx canonical debian hp apple	curl ubuntu_linux debian_linux libcurl system_management_homepage mac_os_x	cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-3143	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

271300	-	simple_ads_manager_project	simple_ads_manager	Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an…	NVD-CWE-Other	CVE-2015-2825	2024-11-21 11:28	2015-04-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed