Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252981	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の CIFS における長大な nativeFileSystem フィールドの処理に関するバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1439	2010-02-17 11:44	2009-04-27	Show	GitHub Exploit DB Packet Storm

252982	6.8	警告	サイバートラスト株式会社 Mozilla Foundation Pango.org レッドハット	-	Pango の pango_glyph_string_set_size 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1194	2010-02-17 11:44	2009-05-8	Show	GitHub Exploit DB Packet Storm

252983	9.3	危険	Artifex Software サイバートラスト株式会社 Argyll CMS サン・マイクロシステムズレッドハット	-	Ghostscript の ICC Format ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0792	2010-02-17 11:44	2009-04-14	Show	GitHub Exploit DB Packet Storm

252984	9.3	危険	Artifex Software サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	ICC Format ライブラリにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-0584	2010-02-17 11:44	2009-03-23	Show	GitHub Exploit DB Packet Storm

252985	9.3	危険	Artifex Software サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	ICC Format ライブラリにおける整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0583	2010-02-17 11:43	2009-03-23	Show	GitHub Exploit DB Packet Storm

252986	6	警告	Artifex Software サイバートラスト株式会社レッドハット	-	Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0411	2010-02-17 11:43	2008-02-27	Show	GitHub Exploit DB Packet Storm

252987	2.1	注意	サイバートラスト株式会社レッドハット	-	lm_sensors の pwmconfig (スクリプト)における不適切な一時ファイル作成によるシンボリックリンク攻撃を受ける脆弱性	-	CVE-2005-2672	2010-02-17 11:43	2005-08-22	Show	GitHub Exploit DB Packet Storm

252988	9.3	危険	アップル	-	Apple Mac OS X の Image RAW における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0037	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

252989	9.3	危険	アップル	-	Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0036	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

252990	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4003	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
278121	-	omfg_mobile_project	omfg_mobile	Cross-site scripting (XSS) vulnerability in shortcode-generator/preview-shortcode-external.php in the OMFG Mobile Pro plugin 1.1.26 and earlier for WordPress allows remote attackers to inject arbitra…	CWE-79 Cross-site Scripting	CVE-2014-4541	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm

278122	-	oleggo_livestream_project	oleggo_livestream	Cross-site scripting (XSS) vulnerability in oleggo-twitter/twitter_login_form.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web scrip…	CWE-79 Cross-site Scripting	CVE-2014-4540	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm

278123	-	keyword_strategy_internal_links_project	keyword_strategy_internal_links	Cross-site scripting (XSS) vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2014-4537	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm

278124	-	garagesale_project	garagesale	Cross-site scripting (XSS) vulnerability in templates/printAdminUsersList_Footer.tpl.php in the GarageSale plugin before 1.2.3 for WordPress allows remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2014-4532	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm

278125	-	game_tabs_project	game_tabs	Cross-site scripting (XSS) vulnerability in main_page.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter.	CWE-79 Cross-site Scripting	CVE-2014-4531	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm

278126	-	flash_photo_gallery_project	flash_photo_gallery	Cross-site scripting (XSS) vulnerability in fpg_preview.php in the Flash Photo Gallery plugin 0.7 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the path…	CWE-79 Cross-site Scripting	CVE-2014-4529	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm

278127	-	envialosimple	email_marketing_y_newsletters	Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the EnvialoSimple: Email Marketing and Newsletters (envialosimple-email-marketing-y-newsletters-gratis) plugin …	CWE-79 Cross-site Scripting	CVE-2014-4527	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm

278128	-	efence_project	efence	Multiple cross-site scripting (XSS) vulnerabilities in callback.php in the efence plugin 1.3.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) mess…	CWE-79 Cross-site Scripting	CVE-2014-4526	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm

278129	-	wp_easy_post_types_project	wp_easy_post_types	Cross-site scripting (XSS) vulnerability in classes/custom-image/media.php in the WP Easy Post Types plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2014-4524	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm

278130	-	dssearchagent_project	dssearchagent	Cross-site scripting (XSS) vulnerability in client-assist.php in the dsSearchAgent: WordPress Edition plugin 1.0-beta10 and earlier for WordPress allows remote attackers to inject arbitrary web scrip…	CWE-79 Cross-site Scripting	CVE-2014-4522	2024-11-21 11:10	2014-07-3	Show	GitHub Exploit DB Packet Storm