Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253061 4.3 警告 オラクル - Oracle Siebel CRM の Siebel CRM Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0834 2011-05-16 11:27 2011-04-19 Show GitHub Exploit DB Packet Storm
253062 4.3 警告 オラクル - Oracle Siebel CRM の Siebel CRM Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0833 2011-05-16 11:27 2011-04-19 Show GitHub Exploit DB Packet Storm
253063 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品の navigator.plugins の実装における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-2767 2011-05-16 11:09 2010-09-7 Show GitHub Exploit DB Packet Storm
253064 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品の normalizeDocument 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-2766 2011-05-16 11:08 2010-09-7 Show GitHub Exploit DB Packet Storm
253065 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品の FRAMESET 要素の実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-2765 2011-05-16 11:07 2010-09-7 Show GitHub Exploit DB Packet Storm
253066 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品の nsTreeSelection 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-2760 2011-05-16 11:05 2010-09-7 Show GitHub Exploit DB Packet Storm
253067 3.7 注意 オラクル - Oracle Solaris における LOFS の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0839 2011-05-13 11:37 2011-04-19 Show GitHub Exploit DB Packet Storm
253068 4.9 警告 オラクル - Oracle Solaris における Kernel/SPARC の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0829 2011-05-13 11:36 2011-04-19 Show GitHub Exploit DB Packet Storm
253069 4.3 警告 オラクル - Oracle PeopleSoft Enterprise の Application Portal における脆弱性 CWE-noinfo
情報不足
CVE-2011-0828 2011-05-13 11:35 2011-04-19 Show GitHub Exploit DB Packet Storm
253070 3.5 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0827 2011-05-13 11:34 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274661 8.8 HIGH
Network
synametrics synaman
syncrify
syntail
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567 CWE-352
 Origin Validation Error
CVE-2015-3140 2024-11-21 11:28 2019-11-22 Show GitHub Exploit DB Packet Storm
274662 6.1 MEDIUM
Network
ikiwiki
fedoraproject
ikiwiki
fedora
Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openid_identifier parame… CWE-79
Cross-site Scripting
CVE-2015-2793 2024-11-21 11:28 2019-11-22 Show GitHub Exploit DB Packet Storm
274663 7.5 HIGH
Network
postgresql
debian
canonical
postgresql
debian_linux
ubuntu_linux
contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which … CWE-200
Information Exposure
CVE-2015-3167 2024-11-21 11:28 2019-11-21 Show GitHub Exploit DB Packet Storm
274664 9.8 CRITICAL
Network
postgresql
debian
canonical
postgresql
debian_linux
ubuntu_linux
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-3166 2024-11-21 11:28 2019-11-21 Show GitHub Exploit DB Packet Storm
274665 6.1 MEDIUM
Network
projectpier projectpier Multiple cross-site scripting (XSS) vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the search_for parameter to (1) search_by_tag.ph… CWE-79
Cross-site Scripting
CVE-2015-2796 2024-11-21 11:28 2018-02-3 Show GitHub Exploit DB Packet Storm
274666 5.9 MEDIUM
Network
yodobashi yodobashi The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a… CWE-295
Improper Certificate Validation 
CVE-2015-2981 2024-11-21 11:28 2018-01-13 Show GitHub Exploit DB Packet Storm
274667 9.8 CRITICAL
Network
apache traffic_server The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service (out-of-bounds access and daemon crash) or possibly execute arbitrary … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-3249 2024-11-21 11:28 2017-10-30 Show GitHub Exploit DB Packet Storm
274668 8.8 HIGH
Network
watchguard hawkeye_g Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of administrators for requests that (1) add arbitrary acco… CWE-352
 Origin Validation Error
CVE-2015-2878 2024-11-21 11:28 2017-10-24 Show GitHub Exploit DB Packet Storm
274669 5.9 MEDIUM
Network
fedoraproject spin-kickstarts fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-3229 2024-11-21 11:28 2017-10-17 Show GitHub Exploit DB Packet Storm
274670 9.8 CRITICAL
Network
berta berta_cms Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct re… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2015-2780 2024-11-21 11:28 2017-10-17 Show GitHub Exploit DB Packet Storm