Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253051 6.4 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2010-2191 2010-08-17 17:35 2010-05-31 Show GitHub Exploit DB Packet Storm
253052 5 警告 The PHP Group - PHP の Zend Engine における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1914 2010-08-17 17:34 2010-05-8 Show GitHub Exploit DB Packet Storm
253053 6.4 警告 The PHP Group - PHP の sysvshm 拡張における任意のメモリアドレスを書かれる脆弱性 CWE-399
リソース管理の問題
CVE-2010-1861 2010-08-17 17:33 2010-05-5 Show GitHub Exploit DB Packet Storm
253054 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- 複数の Mozilla 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0654 2010-08-16 18:57 2010-02-18 Show GitHub Exploit DB Packet Storm
253055 7.6 危険 アップル - Apple Safari における window オブジェクトの処理に脆弱性 CWE-399
リソース管理の問題
CVE-2010-1939 2010-08-16 15:08 2010-05-12 Show GitHub Exploit DB Packet Storm
253056 7.6 危険 IBM - IBM Lotus Domino Web Access の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0919 2010-08-16 15:05 2010-03-3 Show GitHub Exploit DB Packet Storm
253057 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- 複数の Mozilla 製品における重要な cross-origin 情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1207 2010-08-13 17:15 2010-07-20 Show GitHub Exploit DB Packet Storm
253058 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- 複数の Mozilla 製品におけるクローム特権で任意の JavaScript コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1215 2010-08-13 17:14 2010-07-20 Show GitHub Exploit DB Packet Storm
253059 7.8 危険 マイクロソフト - Microsoft Windows におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1892 2010-08-13 14:01 2010-08-13 Show GitHub Exploit DB Packet Storm
253060 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-1212 2010-08-12 19:03 2010-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278601 - linux
suse
canonical
redhat
linux_kernel
linux_enterprise_server
ubuntu_linux
enterprise_linux_server_aus
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX… CWE-190
 Integer Overflow or Wraparound
CVE-2014-4656 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
278602 - linux
suse
canonical
linux_kernel
linux_enterprise_server
ubuntu_linux
The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows local user… CWE-190
 Integer Overflow or Wraparound
CVE-2014-4655 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
278603 - linux
suse
canonical
linux_kernel
linux_enterprise_server
ubuntu_linux
The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, whic… CWE-416
 Use After Free
CVE-2014-4654 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
278604 - linux
suse
canonical
linux_kernel
linux_enterprise_server
ubuntu_linux
sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service (use-a… CWE-416
 Use After Free
CVE-2014-4653 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
278605 - linux
suse
canonical
redhat
linux_kernel
linux_enterprise_server
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users t… CWE-362
Race Condition
CVE-2014-4652 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
278606 - linux linux_kernel Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bi… CWE-20
 Improper Input Validation 
CVE-2014-4611 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
278607 - linux
suse
opensuse
canonical
linux_kernel
linux_enterprise_real_time_extension
opensuse
linux_enterprise_server
ubuntu_linux
Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to caus… CWE-190
 Integer Overflow or Wraparound
CVE-2014-4608 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
278608 - piwigo piwigo Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUse… CWE-352
 Origin Validation Error
CVE-2014-4614 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
278609 - zeenshare_project zeenshare Cross-site scripting (XSS) vulnerability in redirect_to_zeenshare.php in the ZeenShare plugin 1.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the zs… CWE-79
Cross-site Scripting
CVE-2014-4606 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
278610 - wp_social_invitations_project wp_social_invitations Cross-site scripting (XSS) vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl par… CWE-79
Cross-site Scripting
CVE-2014-4597 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm