Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252861 4.9 警告 オラクル - Oracle Solaris における GigaSwift Ethernet ドライバの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-2386 2010-08-3 19:20 2010-07-13 Show GitHub Exploit DB Packet Storm
252862 5.6 警告 オラクル - Oracle Solaris における ZFS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-2392 2010-08-3 19:20 2010-07-13 Show GitHub Exploit DB Packet Storm
252863 6.2 警告 オラクル - Oracle Solaris における rdist の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-0916 2010-08-3 19:20 2010-07-13 Show GitHub Exploit DB Packet Storm
252864 7.5 危険 OpenBSD
FreeBSD
オラクル
NetBSD		 - 複数の製品の ftpd におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4247 2010-08-3 19:19 2008-09-25 Show GitHub Exploit DB Packet Storm
252865 7.5 危険 ターボリナックス
MySQL AB		 - MySQL で使用される yaSSL における複数のスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4484 2010-08-3 18:59 2009-12-30 Show GitHub Exploit DB Packet Storm
252866 2.1 注意 オラクル - Oracle Database Server の Export コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0901 2010-08-2 19:32 2010-07-13 Show GitHub Exploit DB Packet Storm
252867 2.6 注意 オラクル - Windows 上で稼働する Oracle Database Server の Network Layer コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0900 2010-08-2 19:32 2010-07-13 Show GitHub Exploit DB Packet Storm
252868 4.3 警告 オラクル - Oracle Database Server の Application Express コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0892 2010-08-2 19:32 2010-07-13 Show GitHub Exploit DB Packet Storm
252869 6 警告 オラクル - Oracle Database Server の Oracle OLAP コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0902 2010-08-2 19:31 2010-07-13 Show GitHub Exploit DB Packet Storm
252870 7.8 危険 オラクル - Windows 上で稼働する Oracle Database Server の Net Foundation Layer コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0903 2010-08-2 19:31 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269391 - adobe flash_player
air_sdk
air_sdk_\&_compiler
air 		Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR … NVD-CWE-Other
CVE-2015-5540 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm
269392 - adobe flash_player
air_sdk
air_sdk_\&_compiler
air 		Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR … NVD-CWE-Other
CVE-2015-5539 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm
269393 - bittorrent bootstrap-dht The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing." CWE-20
 Improper Input Validation  		CVE-2015-5685 2024-11-21 11:33 2015-08-13 Show GitHub Exploit DB Packet Storm
269394 - belkin n300_dual-band_wi-fi_range_extender_firmware Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via the (1) sub_dir parameter in a formUSBStorage request; pinC… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-5536 2024-11-21 11:33 2015-08-13 Show GitHub Exploit DB Packet Storm
269395 - qtranslate_project qtranslate Cross-site scripting (XSS) vulnerability in the qTranslate plugin 2.5.39 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the qtransl… CWE-79
Cross-site Scripting 		CVE-2015-5535 2024-11-21 11:33 2015-08-13 Show GitHub Exploit DB Packet Storm
269396 - bittorrent
utorrent 		bittorrent
utorrent 		BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol. CWE-77
Command Injection 		CVE-2015-5474 2024-11-21 11:33 2015-08-13 Show GitHub Exploit DB Packet Storm
269397 - websense content_gateway Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote administrators to cause a denial of service (crash) via a c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-5718 2024-11-21 11:33 2015-08-12 Show GitHub Exploit DB Packet Storm
269398 - canonical
debian
apple
htacg 		ubuntu_linux
debian_linux
mac_os_x
watchos
iphone_os
tidy 		The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-5523 2024-11-21 11:33 2015-08-11 Show GitHub Exploit DB Packet Storm
269399 - htacg
canonical
debian
apple 		tidy
ubuntu_linux
debian_linux
mac_os_x
watchos
iphone_os 		Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an hre… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-5522 2024-11-21 11:33 2015-08-11 Show GitHub Exploit DB Packet Storm
269400 - wordpress
debian 		wordpress
debian_linux 		WordPress before 4.2.3 does not properly verify the edit_posts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscribe… CWE-284
Improper Access Control 		CVE-2015-5623 2024-11-21 11:33 2015-08-3 Show GitHub Exploit DB Packet Storm