Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253141	9.3	危険	マイクロソフト	-	Microsoft Windows の kernel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2514	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253142	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2513	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253143	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253144	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253145	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

253146	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

253147	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294611	-	parallels	parallels_plesk_panel	The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture…	CWE-200 Information Exposure	CVE-2011-4728	2024-11-21 10:32	2011-12-16	Show	GitHub Exploit DB Packet Storm

294612	-	parallels	parallels_plesk_panel	The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string data that is intended for storage in an XML document, which allows remote attacker…	CWE-20 Improper Input Validation	CVE-2011-4727	2024-11-21 10:32	2011-12-16	Show	GitHub Exploit DB Packet Storm

294613	-	parallels	parallels_plesk_panel	Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to inject arbitrary web script or HTML…	CWE-79 Cross-site Scripting	CVE-2011-4726	2024-11-21 10:32	2011-12-16	Show	GitHub Exploit DB Packet Storm

294614	-	parallels	parallels_plesk_panel	Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to execute arbitrary SQL commands via crafted input…	CWE-89 SQL Injection	CVE-2011-4725	2024-11-21 10:32	2011-12-16	Show	GitHub Exploit DB Packet Storm

294615	-	artsoft	rocks\'n\'diamonds	Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-4606	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

294616	-	digium	asterisk	The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial of…	CWE-200 Information Exposure	CVE-2011-4598	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

294617	-	digium	asterisk	The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on…	CWE-200 Information Exposure	CVE-2011-4597	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

294618	-	jasper_project suse fedoraproject canonical debian oracle redhat	jasper linux_enterprise_server fedora ubuntu_linux linux_enterprise_desktop debian_linux linux_enterprise_software_development_kit outside_in_technology enterprise_linux_deskt…	The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer o…	CWE-787 Out-of-bounds Write	CVE-2011-4517	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

294619	-	jasper_project suse fedoraproject canonical debian oracle	jasper linux_enterprise_server fedora ubuntu_linux linux_enterprise_desktop debian_linux linux_enterprise_software_development_kit outside_in_technology	Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr…	CWE-787 Out-of-bounds Write	CVE-2011-4516	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

294620	-	ipmitool_project	ipmitool	ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2011-4339	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed