Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253101	6.9	警告	サイバートラスト株式会社レッドハット acpid	-	acpid のレッドハットパッチにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4033	2010-01-21 11:43	2009-12-7	Show	GitHub Exploit DB Packet Storm

253102	10	危険	アドビシステムズ	-	Adobe Illustrator における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3952	2010-01-21 11:43	2010-01-7	Show	GitHub Exploit DB Packet Storm

253103	9.3	危険	アドビシステムズ	-	Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4195	2010-01-21 11:43	2009-12-4	Show	GitHub Exploit DB Packet Storm

253104	4.4	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1337	2010-01-21 11:23	2009-04-22	Show	GitHub Exploit DB Packet Storm

253105	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel における sendmsg 関数の呼び出しに関するサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-5300	2010-01-21 11:22	2008-12-1	Show	GitHub Exploit DB Packet Storm

253106	6.8	警告	シスコシステムズ	-	複数の SSL VPN (Web VPN) 製品においてウェブブラウザのセキュリティが迂回される問題	CWE-264 認可・権限・アクセス制御	CVE-2009-2631	2010-01-20 14:15	2009-12-1	Show	GitHub Exploit DB Packet Storm

253107	4.4	警告	DAG レッドハット	-	dstat における Python module の検索パスに関する権限昇格の脆弱性	CWE-Other その他	CVE-2009-3894	2010-01-20 14:15	2009-11-29	Show	GitHub Exploit DB Packet Storm

253108	6.4	警告	OSIsoft	-	PI Server の OSIsoft PI System におけるデータベースの情報を変更される脆弱性	CWE-310 暗号の問題	CVE-2009-0209	2010-01-20 14:14	2009-10-1	Show	GitHub Exploit DB Packet Storm

253109	9.3	危険	サン・マイクロシステムズ freedesktop.org レッドハットサイバートラスト株式会社 Glyph & Cog, LLC	-	Xpdf および Poppler の PSOutputDev::doImageL1Sep 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3606	2010-01-20 11:57	2009-10-15	Show	GitHub Exploit DB Packet Storm

253110	6.5	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	PostgreSQL の core server コンポーネントにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3230	2010-01-19 15:49	2009-09-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
272281	-	microsoft	windows_server_2012 windows_8.1	Virtual Machine Manager (VMM) in Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 allows guest OS users to cause a denial of service (VMM functionality loss) via a crafted application, aka…	CWE-20 Improper Input Validation	CVE-2015-1647	2024-11-21 11:25	2015-04-15	Show	GitHub Exploit DB Packet Storm

272282	-	microsoft	xml_core_services	Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerabili…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-1646	2024-11-21 11:25	2015-04-15	Show	GitHub Exploit DB Packet Storm

272283	-	microsoft	windows_7 windows_server_2008 windows_server_2003 windows_vista	Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to execute arbitrary code via a crafted Enhanced Metafile (EMF) imag…	CWE-94 Code Injection	CVE-2015-1645	2024-11-21 11:25	2015-04-15	Show	GitHub Exploit DB Packet Storm

272284	-	microsoft	windows_server_2008 windows_server_2012 windows_rt windows_server_2003 windows_8.1 windows_7 windows_rt_8.1 windows_vista windows_8	Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not pr…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-1644	2024-11-21 11:25	2015-04-15	Show	GitHub Exploit DB Packet Storm

272285	-	microsoft	windows_server_2008 windows_server_2012 windows_rt windows_server_2003 windows_8.1 windows_7 windows_rt_8.1 windows_vista windows_8	Microsoft Windows Server 2003 R2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not pro…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-1643	2024-11-21 11:25	2015-04-15	Show	GitHub Exploit DB Packet Storm

272286	-	microsoft	project_server	Cross-site scripting (XSS) vulnerability in Microsoft Project Server 2010 SP2 and 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePo…	CWE-79 Cross-site Scripting	CVE-2015-1640	2024-11-21 11:25	2015-04-15	Show	GitHub Exploit DB Packet Storm

272287	-	microsoft	office	Cross-site scripting (XSS) vulnerability in Microsoft Office for Mac 2011 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Outlook App for Mac XS…	CWE-79 Cross-site Scripting	CVE-2015-1639	2024-11-21 11:25	2015-04-15	Show	GitHub Exploit DB Packet Storm

272288	-	microsoft	windows_server_2012	Microsoft Active Directory Federation Services (AD FS) 3.0 on Windows Server 2012 R2 does not properly handle logoff actions, which allows remote attackers to bypass intended access restrictions by l…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-1638	2024-11-21 11:25	2015-04-15	Show	GitHub Exploit DB Packet Storm

272289	-	freebsd	freebsd	The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile (/boot/encryption.key), which allows local user…	CWE-200 Information Exposure	CVE-2015-1415	2024-11-21 11:25	2015-04-11	Show	GitHub Exploit DB Packet Storm

272290	-	canonical oxide_project	ubuntu_linux oxide	Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents w…	NVD-CWE-Other	CVE-2015-1317	2024-11-21 11:25	2015-04-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed