Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253081 2.6 注意 富士通九州システムズ - e-Pares におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2151 2010-06-2 15:04 2010-06-2 Show GitHub Exploit DB Packet Storm
253082 4.3 警告 富士通九州システムズ - e-Pares におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2150 2010-06-2 15:02 2010-06-2 Show GitHub Exploit DB Packet Storm
253083 2.1 注意 アドビシステムズ - Adobe ColdFusion における重要な情報を取得される脆弱性 CWE-200
CWE-noinfo
CVE-2010-1294 2010-06-2 12:14 2010-05-11 Show GitHub Exploit DB Packet Storm
253084 4.3 警告 アドビシステムズ - Adobe ColdFusion の Administrator ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1293 2010-06-2 12:14 2010-05-11 Show GitHub Exploit DB Packet Storm
253085 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3467 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
253086 9.3 危険 アドビシステムズ - Adobe Shockwave Player の pami RIFF chunk 構文解析における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1292 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
253087 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1291 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
253088 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1290 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
253089 9.3 危険 ジャストシステム - 一太郎シリーズにおける任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2152 2010-06-1 16:01 2010-06-1 Show GitHub Exploit DB Packet Storm
253090 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1289 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268991 - apple mac_os_x Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app. CWE-200
Information Exposure 		CVE-2015-5836 2024-11-21 11:33 2015-10-9 Show GitHub Exploit DB Packet Storm
268992 - apple mac_os_x The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unatt… CWE-254
 7PK - Security Features 		CVE-2015-5833 2024-11-21 11:33 2015-10-9 Show GitHub Exploit DB Packet Storm
268993 - apple mac_os_x The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerabilit… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-5830 2024-11-21 11:33 2015-10-9 Show GitHub Exploit DB Packet Storm
268994 - opensuse
apple 		leap
safari 		The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass inten… CWE-20
 Improper Input Validation  		CVE-2015-5828 2024-11-21 11:33 2015-10-9 Show GitHub Exploit DB Packet Storm
268995 - apple safari The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors. CWE-20
 Improper Input Validation  		CVE-2015-5780 2024-11-21 11:33 2015-10-9 Show GitHub Exploit DB Packet Storm
268996 - cybozu garoon Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended l… CWE-287
Improper Authentication 		CVE-2015-5649 2024-11-21 11:33 2015-10-9 Show GitHub Exploit DB Packet Storm
268997 - python python Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory. NOTE… NVD-CWE-Other
CVE-2015-5652 2024-11-21 11:33 2015-10-6 Show GitHub Exploit DB Packet Storm
268998 - ajaxplorer ajaxplorer Directory traversal vulnerability in AjaXplorer 2.0 allows remote attackers to read arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2015-5650 2024-11-21 11:33 2015-10-6 Show GitHub Exploit DB Packet Storm
268999 - icz matchasns ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-5645 2024-11-21 11:33 2015-10-6 Show GitHub Exploit DB Packet Storm
269000 - icz matchasns The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors. CWE-94
Code Injection 		CVE-2015-5644 2024-11-21 11:33 2015-10-6 Show GitHub Exploit DB Packet Storm