Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252951	5	警告	Eyrie VMware レッドハット	-	pam_krb5 における有効なユーザ名を列挙される脆弱性	CWE-287 不適切な認証	CVE-2009-1384	2011-02-28 14:51	2009-05-28	Show	GitHub Exploit DB Packet Storm

252952	4.4	警告	サイバートラスト株式会社 VMware レッドハット	-	Red Hat Enterprise Linux の pam_krb5 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3825	2011-02-28 14:48	2008-10-2	Show	GitHub Exploit DB Packet Storm

252953	6.8	警告	Haxx アップル VMware サイバートラスト株式会社レッドハット	-	libcurl の content_encoding.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0734	2011-02-28 14:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

252954	4.3	警告	VMware OpenSSL Project	-	OpenSSL クライアントの ssl3_get_key_exchange 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2939	2011-02-28 14:39	2010-08-17	Show	GitHub Exploit DB Packet Storm

252955	10	危険	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	複数の Oracle 製品の Java Deployment Toolkit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0886	2011-02-28 14:16	2010-04-15	Show	GitHub Exploit DB Packet Storm

252956	8.3	危険	インターネットイニシアティブ	-	SEIL シリーズにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0454	2011-02-28 12:08	2011-02-28	Show	GitHub Exploit DB Packet Storm

252957	6.8	警告	Google	-	OpenCORE の Huffman デコーディング機能における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0475	2011-02-25 14:13	2009-02-17	Show	GitHub Exploit DB Packet Storm

252958	7.2	危険	Google	-	T-Mobile G1 phone 上で稼働する Open Handset Alliance Android の link_image 関数における任意のファイルを作成される脆弱性	CWE-20 不適切な入力確認	CVE-2009-0606	2011-02-25 14:11	2009-02-17	Show	GitHub Exploit DB Packet Storm

252959	5	警告	シスコシステムズ	-	Cisco IOS 上で稼働する STCAPP におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-4687	2011-02-25 14:07	2011-01-7	Show	GitHub Exploit DB Packet Storm

252960	7.8	危険	シスコシステムズ	-	Cisco IOS 上で稼働する CallManager Express におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4686	2011-02-25 14:05	2011-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
282121	-	ge	intelligent_platforms_proficy_hmi\/scada_cimplicity	The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-2355	2024-11-21 11:06	2015-01-17	Show	GitHub Exploit DB Packet Storm

282122	-	quick_page\/post_redirect_project	quick_page\/post_redirect	Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests t…	CWE-352 Origin Validation Error	CVE-2014-2598	2024-11-21 11:06	2015-01-6	Show	GitHub Exploit DB Packet Storm

282123	-	ekahau	real-time_location_system_controller activator b4_staff_badge_tag_firmware	Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activator 3 reuses the RC4 cipher stream, which makes it easier for remote attackers t…	CWE-310 Cryptographic Issues	CVE-2014-2716	2024-11-21 11:06	2014-12-20	Show	GitHub Exploit DB Packet Storm

282124	-	emc	rsa_authentication_manager	Open redirect vulnerability in EMC RSA Authentication Manager 8.x before 8.1 Patch 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vect…	NVD-CWE-Other	CVE-2014-2516	2024-11-21 11:06	2014-12-13	Show	GitHub Exploit DB Packet Storm

282125	-	hpe	smart_update_manager	Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to obtain sensitive information, and consequently g…	NVD-CWE-noinfo	CVE-2014-2608	2024-11-21 11:06	2014-12-11	Show	GitHub Exploit DB Packet Storm

282126	-	faronics	deep_freeze	The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service (crash) and execute arbitrary code via a crafted IOCT…	CWE-399 Resource Management Errors	CVE-2014-2382	2024-11-21 11:06	2014-11-20	Show	GitHub Exploit DB Packet Storm

282127	-	python	python	Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and multiple threads are used, might allow local users to bypass intended file per…	CWE-362 Race Condition	CVE-2014-2667	2024-11-21 11:06	2014-11-16	Show	GitHub Exploit DB Packet Storm

282128	-	zend	zendopenid zend_framework	The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before 1.12.4 does not verify that the openid_op_endpoint value i…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2684	2024-11-21 11:06	2014-11-16	Show	GitHub Exploit DB Packet Storm

282129	-	zend	zendrest zend_framework zendservice_slideshare zendservice_api zendservice_audioscrobbler zendservice_amazon zendservice_technorati zendservice_windowsazure zendopenid zend…	Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService…	CWE-17 Code	CVE-2014-2683	2024-11-21 11:06	2014-11-16	Show	GitHub Exploit DB Packet Storm

282130	-	zend	zendrest zend_framework zendservice_slideshare zendservice_api zendservice_audioscrobbler zendservice_amazon zendservice_technorati zendservice_windowsazure zendopenid zend…	Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService…	CWE-19 Data Processing Errors	CVE-2014-2682	2024-11-21 11:06	2014-11-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed