Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252811 7.2 危険 VMware - VMware Fusion の vmx86 のカーネル拡張における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3281 2010-03-24 12:22 2009-10-1 Show GitHub Exploit DB Packet Storm
252812 9.3 危険 VMware - 複数の VMware 製品の VMnc media コーデックにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2628 2010-03-24 12:22 2009-09-4 Show GitHub Exploit DB Packet Storm
252813 9.3 危険 VMware - 複数の VMware 製品の VMnc media コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0199 2010-03-24 12:22 2009-09-4 Show GitHub Exploit DB Packet Storm
252814 5 警告 VMware - VMware Studio の Web インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2968 2010-03-24 12:22 2009-08-31 Show GitHub Exploit DB Packet Storm
252815 4 警告 VMware - 複数の VMware 製品の Descheduled Time Accounting ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1805 2010-03-24 12:22 2009-05-28 Show GitHub Exploit DB Packet Storm
252816 6.8 警告 VMware - 複数の VMware 製品の仮想マシン表示機能における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-1244 2010-03-24 12:21 2009-04-10 Show GitHub Exploit DB Packet Storm
252817 7.2 危険 VMware - 複数の VMware 製品の仮想マシン通信インターフェイスにおける権限昇格の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1147 2010-03-24 12:21 2009-04-3 Show GitHub Exploit DB Packet Storm
252818 4.9 警告 VMware - 複数の VMware 製品の ioctl におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1146 2010-03-23 14:11 2010-04-3 Show GitHub Exploit DB Packet Storm
252819 6.8 警告 VMware - 複数の VMware 製品の VNnc コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0910 2010-03-23 14:11 2010-04-3 Show GitHub Exploit DB Packet Storm
252820 9.3 危険 VMware - 複数の VMware 製品の VNnc コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0909 2010-03-23 14:10 2010-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278051 - apple mac_os_x LaunchServices in Apple OS X before 10.10 allows attackers to bypass intended sandbox restrictions via an application that specifies a crafted handler for the Content-Type field of an object. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-4437 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm
278052 - apple mac_os_x IOHIDFamily in Apple OS X before 10.10 allows attackers to cause denial of service (out-of-bounds read operation) via a crafted application. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-4436 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm
278053 - apple mac_os_x The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access v… CWE-287
Improper Authentication 		CVE-2014-4435 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm
278054 - apple mac_os_x The kernel in Apple OS X before 10.10 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted filename on an HFS filesystem. CWE-20
 Improper Input Validation  		CVE-2014-4434 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm
278055 - apple mac_os_x Heap-based buffer overflow in the kernel in Apple OS X before 10.10 allows physically proximate attackers to execute arbitrary code via crafted resource forks in an HFS filesystem. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-4433 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm
278056 - apple mac_os_x fdesetup in Apple OS X before 10.10 does not properly display the encryption status in between a setting-update action and a reboot action, which might make it easier for physically proximate attacke… CWE-310
Cryptographic Issues 		CVE-2014-4432 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm
278057 - apple mac_os_x Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attackers to view windows by leveraging an unattended workstation. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-4431 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm
278058 - apple mac_os_x CoreStorage in Apple OS X before 10.10 retains a volume's encryption keys upon an eject action in the unlocked state, which makes it easier for physically proximate attackers to obtain cleartext data… CWE-310
Cryptographic Issues 		CVE-2014-4430 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm
278059 - apple mac_os_x Bluetooth in Apple OS X before 10.10 does not require encryption for HID Low Energy devices, which allows remote attackers to spoof a device by leveraging previous pairing. CWE-310
Cryptographic Issues 		CVE-2014-4428 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm
278060 - apple mac_os_x App Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism via the accessibility API. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-4427 2024-11-21 11:10 2014-10-18 Show GitHub Exploit DB Packet Storm