Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253161 6.8 警告 Schezo - Lhaplus における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-2368 2010-10-12 11:02 2010-10-12 Show GitHub Exploit DB Packet Storm
253162 6.8 警告 アップル - Apple Mac OS X の Apple Filing Protocol Server におけるパスワード要求を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-1820 2010-10-8 17:08 2010-09-21 Show GitHub Exploit DB Packet Storm
253163 5 警告 マイクロソフト - Microsoft .NET Framework における View State フォームデータを復号または変更される脆弱性 CWE-310
暗号の問題 		CVE-2010-3332 2010-10-8 17:07 2010-09-17 Show GitHub Exploit DB Packet Storm
253164 2.6 注意 IBM - IBM WebSphere Application Server の Web コンテナにおける重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0777 2010-10-8 17:05 2010-05-8 Show GitHub Exploit DB Packet Storm
253165 5 警告 IBM - IBM WebSphere Application Server の Web コンテナ におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0776 2010-10-8 17:04 2010-05-8 Show GitHub Exploit DB Packet Storm
253166 5 警告 Drupal
サイバートラスト株式会社		 - Drupal の OpenID モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-3686 2010-10-7 16:40 2010-08-11 Show GitHub Exploit DB Packet Storm
253167 5 警告 Drupal
サイバートラスト株式会社		 - Drupal の OpenID モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-3685 2010-10-7 16:39 2010-08-11 Show GitHub Exploit DB Packet Storm
253168 5 警告 Drupal
サイバートラスト株式会社		 - Drupal の OpenID モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-3091 2010-10-7 16:39 2010-08-11 Show GitHub Exploit DB Packet Storm
253169 2.1 注意 Drupal
サイバートラスト株式会社		 - Drupal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3094 2010-10-7 16:39 2010-08-11 Show GitHub Exploit DB Packet Storm
253170 3.5 注意 Drupal
サイバートラスト株式会社		 - Drupal の comment モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3093 2010-10-7 16:38 2010-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281911 6.5 MEDIUM
Network 		buddypress buddypress The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrary groups by leveraging a missing permissions check. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1889 2024-11-21 11:05 2018-04-11 Show GitHub Exploit DB Packet Storm
281912 9.8 CRITICAL
Network 		owncloud owncloud The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation. CWE-284
Improper Access Control 		CVE-2014-2048 2024-11-21 11:05 2018-03-27 Show GitHub Exploit DB Packet Storm
281913 5.9 MEDIUM
Network 		maradns_project
deadwood_project 		maradns
deadwood 		Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging… CWE-20
CWE-125
 Improper Input Validation 
Out-of-bounds Read 		CVE-2014-2032 2024-11-21 11:05 2018-03-21 Show GitHub Exploit DB Packet Storm
281914 5.9 MEDIUM
Network 		maradns_project
deadwood_project 		maradns
deadwood 		Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging… CWE-125
Out-of-bounds Read 		CVE-2014-2031 2024-11-21 11:05 2018-03-21 Show GitHub Exploit DB Packet Storm
281915 8.8 HIGH
Network 		subscribe_to_comments_reloaded_project subscribe_to_comments_reloaded Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for req… CWE-352
 Origin Validation Error 		CVE-2014-2274 2024-11-21 11:05 2018-03-20 Show GitHub Exploit DB Packet Storm
281916 7.8 HIGH
Local 		echor_project echor The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table. CWE-255
Credentials Management 		CVE-2014-1835 2024-11-21 11:05 2018-02-3 Show GitHub Exploit DB Packet Storm
281917 7.8 HIGH
Local 		echor_project echor The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to inject arbitrary code by adding a semi-colon in their username or password. CWE-77
Command Injection 		CVE-2014-1834 2024-11-21 11:05 2018-02-3 Show GitHub Exploit DB Packet Storm
281918 6.1 MEDIUM
Network 		oxidforge eshop CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and … CWE-93
CRLF Injection 		CVE-2014-2017 2024-11-21 11:05 2018-01-18 Show GitHub Exploit DB Packet Storm
281919 7.1 HIGH
Adjacent 		arubanetworks clearpass Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2071 2024-11-21 11:05 2018-01-9 Show GitHub Exploit DB Packet Storm
281920 5.5 MEDIUM
Local 		numpy
redhat
fedoraproject 		numpy
enterprise_linux
fedora 		(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink at… CWE-59
Link Following 		CVE-2014-1859 2024-11-21 11:05 2018-01-9 Show GitHub Exploit DB Packet Storm