Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253291	7.5	危険	VMware	-	複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0686	2010-04-21 17:53	2010-03-29	Show	GitHub Exploit DB Packet Storm

253292	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1137	2010-04-21 17:51	2010-03-29	Show	GitHub Exploit DB Packet Storm

253293	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4029	2010-04-21 17:51	2009-12-20	Show	GitHub Exploit DB Packet Storm

253294	5	警告	Linux レッドハット	-	Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0741	2010-04-21 17:48	2010-03-30	Show	GitHub Exploit DB Packet Storm

253295	6.9	警告	mielke レッドハット	-	brltty の libbrlttybba.so における権限昇格の脆弱性	CWE-264 CWE-Other	CVE-2008-3279	2010-04-21 17:47	2010-03-30	Show	GitHub Exploit DB Packet Storm

253296	4.3	警告	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0181	2010-04-20 16:42	2010-03-30	Show	GitHub Exploit DB Packet Storm

253297	5.8	警告	サイボウズ	-	複数のサイボウズ製品におけるアクセス制限に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2029	2010-04-20 12:01	2010-04-20	Show	GitHub Exploit DB Packet Storm

253298	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の Tabular Data Control ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0805	2010-04-19 19:20	2010-03-30	Show	GitHub Exploit DB Packet Storm

253299	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0491	2010-04-19 19:19	2010-03-30	Show	GitHub Exploit DB Packet Storm

253300	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer における同一生成元ポリシーを回避される脆弱性	CWE-200 情報漏えい	CVE-2010-0494	2010-04-19 19:19	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270941	5.3	MEDIUM Network	openshift	origin	In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.	CWE-311 Missing Encryption of Sensitive Data	CVE-2015-3207	2024-11-21 11:28	2022-07-7	Show	GitHub Exploit DB Packet Storm

270942	7.2	HIGH Network	custom_content_type_manager_project	custom_content_type_manager	custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.	CWE-94 Code Injection	CVE-2015-3173	2024-11-21 11:28	2022-07-7	Show	GitHub Exploit DB Packet Storm

270943	5.4	MEDIUM Network	eidogo	eidogo	EidoGo is susceptible to Cross-Site Scripting (XSS) attacks via maliciously crafted SGF input.	CWE-79 Cross-site Scripting	CVE-2015-3172	2024-11-21 11:28	2022-07-7	Show	GitHub Exploit DB Packet Storm

270944	6.5	MEDIUM Network	juniper	junos	On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys o…	CWE-331 Insufficient Entropy	CVE-2015-3006	2024-11-21 11:28	2020-02-29	Show	GitHub Exploit DB Packet Storm

270945	6.1	MEDIUM Network	apache	struts	Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.	CWE-79 Cross-site Scripting	CVE-2015-2992	2024-11-21 11:28	2020-02-28	Show	GitHub Exploit DB Packet Storm

270946	6.5	MEDIUM Adjacent	freebsd	freebsd	The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advert…	CWE-20 Improper Input Validation	CVE-2015-2923	2024-11-21 11:28	2020-02-20	Show	GitHub Exploit DB Packet Storm

270947	9.8	CRITICAL Network	netvu	dv-ip_express_firmware sd-advanced_-_sdhd_firmware sd-advanced_8\/12\/16_vga_firmware sd_advanced_closed_iptv_\(m3u\)_firmware sd_advanced_non_closed_iptv_\(m3u\)_firmware sd_advanced_…	Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote a…	CWE-269 Improper Privilege Management	CVE-2015-2909	2024-11-21 11:28	2020-02-7	Show	GitHub Exploit DB Packet Storm

270948	7.5	HIGH Network	hp	asset_manager asset_manager_cloudsystem_chargeback sitescope	An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem …	CWE-200 Information Exposure	CVE-2015-2802	2024-11-21 11:28	2020-02-5	Show	GitHub Exploit DB Packet Storm

270949	6.1	MEDIUM Network	zend	zend_framework	CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct H…	CWE-74 Injection	CVE-2015-3154	2024-11-21 11:28	2020-01-28	Show	GitHub Exploit DB Packet Storm

270950	7.5	HIGH Network	torproject	tor	The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and app…	NVD-CWE-noinfo	CVE-2015-2929	2024-11-21 11:28	2020-01-25	Show	GitHub Exploit DB Packet Storm