Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253141	9.3	危険	マイクロソフト	-	Microsoft Windows の kernel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2514	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253142	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2513	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253143	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253144	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253145	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

253146	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

253147	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
299971	-	linux suse opensuse debian canonical	linux_kernel linux_enterprise_desktop linux_enterprise_server opensuse linux_enterprise_real_time_extension debian_linux ubuntu_linux	The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensi…	CWE-200 Information Exposure	CVE-2010-3298	2024-11-21 10:18	2010-10-1	Show	GitHub Exploit DB Packet Storm

299972	-	linux suse opensuse debian canonical	linux_kernel linux_enterprise_desktop opensuse linux_enterprise_server linux_enterprise_real_time_extension debian_linux ubuntu_linux	The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensit…	CWE-909 Missing Initialization of Resource	CVE-2010-3297	2024-11-21 10:18	2010-10-1	Show	GitHub Exploit DB Packet Storm

299973	-	linux suse opensuse debian canonical	linux_kernel linux_enterprise_desktop opensuse linux_enterprise_server linux_enterprise_real_time_extension debian_linux ubuntu_linux	The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain p…	CWE-200 Information Exposure	CVE-2010-3296	2024-11-21 10:18	2010-10-1	Show	GitHub Exploit DB Packet Storm

299974	-	blueriver	sava_cms mura_cms	Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2 before 5.2.2809, and Sava CMS 5 through 5.2, allows remote attackers to read arbitrary files via a .. (dot …	CWE-22 Path Traversal	CVE-2010-3468	2024-11-21 10:18	2010-09-30	Show	GitHub Exploit DB Packet Storm

299975	-	llnl	slurm	The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared l…	NVD-CWE-Other	CVE-2010-3380	2024-11-21 10:18	2010-09-30	Show	GitHub Exploit DB Packet Storm

299976	-	linux debian canonical	linux_kernel debian_linux ubuntu_linux	Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have u…	CWE-189 Numeric Errors	CVE-2010-3310	2024-11-21 10:18	2010-09-30	Show	GitHub Exploit DB Packet Storm

299977	-	drupal peter_wolanin	drupal openid	The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not verifying the openid.return_to value, which allows remote att…	CWE-287 Improper Authentication	CVE-2010-3091	2024-11-21 10:18	2010-09-30	Show	GitHub Exploit DB Packet Storm

299978	-	sangoma	freepbx	Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to c…	CWE-22 Path Traversal	CVE-2010-3490	2024-11-21 10:18	2010-09-29	Show	GitHub Exploit DB Packet Storm

299979	-	vmware	workstation player	The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-3277	2024-11-21 10:18	2010-09-29	Show	GitHub Exploit DB Packet Storm

299980	-	libtiff opensuse	libtiff opensuse	LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-3087	2024-11-21 10:18	2010-09-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed