Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253381 7.2 危険 マイクロソフト - 複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2744 2010-10-26 15:28 2010-10-12 Show GitHub Exploit DB Packet Storm
253382 4.9 警告 マイクロソフト - 複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2549 2010-10-26 15:28 2010-10-12 Show GitHub Exploit DB Packet Storm
253383 6.5 警告 IBM - Linux 上で稼働する IBM DB2 におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0462 2010-10-26 15:24 2010-01-28 Show GitHub Exploit DB Packet Storm
253384 9.3 危険 マイクロソフト - 64-bit プラットフォーム上で稼働している Microsoft .NET Framework の JIT コンパイラにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3228 2010-10-25 16:37 2010-10-12 Show GitHub Exploit DB Packet Storm
253385 9.3 危険 マイクロソフト - 複数の Microsoft 製品の Embedded OpenType Font Engine における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1883 2010-10-25 16:37 2010-10-12 Show GitHub Exploit DB Packet Storm
253386 7.6 危険 マイクロソフト - 複数の Microsoft 製品の Media Player Network Sharing Service における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3225 2010-10-25 16:36 2010-10-12 Show GitHub Exploit DB Packet Storm
253387 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3331 2010-10-25 16:35 2010-10-12 Show GitHub Exploit DB Packet Storm
253388 4.3 警告 マイクロソフト - Microsoft Internet Explorer における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3330 2010-10-25 16:35 2010-10-12 Show GitHub Exploit DB Packet Storm
253389 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3329 2010-10-25 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
253390 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3328 2010-10-25 16:33 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282301 4.9 MEDIUM
Network 		oracle
openbsd 		communications_user_data_repository
openssh 		sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring locate… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2532 2024-11-21 11:06 2014-03-18 Show GitHub Exploit DB Packet Storm
282302 - lighttpd
debian
opensuse
suse
contec 		lighttpd
debian_linux
opensuse
linux_enterprise_software_development_kit
linux_enterprise_high_availability_extension
sv-cpt-mc310_firmware 		Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, r… CWE-22
Path Traversal 		CVE-2014-2324 2024-11-21 11:06 2014-03-15 Show GitHub Exploit DB Packet Storm
282303 9.8 CRITICAL
Network 		lighttpd
debian
opensuse
suse 		lighttpd
debian_linux
opensuse
linux_enterprise_software_development_kit
linux_enterprise_high_availability_extension 		SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname. CWE-89
SQL Injection 		CVE-2014-2323 2024-11-21 11:06 2014-03-15 Show GitHub Exploit DB Packet Storm
282304 - juniper ive_os Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before… NVD-CWE-noinfo
CVE-2014-2292 2024-11-21 11:06 2014-03-15 Show GitHub Exploit DB Packet Storm
282305 - juniper ive_os Cross-site scripting (XSS) vulnerability in the Pulse Collaboration (Secure Meeting) user pages in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10… CWE-79
Cross-site Scripting 		CVE-2014-2291 2024-11-21 11:06 2014-03-15 Show GitHub Exploit DB Packet Storm
282306 - proxmox mail_gateway Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the (1) state parameter to objects/who/in… CWE-79
Cross-site Scripting 		CVE-2014-2325 2024-11-21 11:06 2014-03-14 Show GitHub Exploit DB Packet Storm
282307 - powerarchiver powerarchiver The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to o… CWE-310
Cryptographic Issues 		CVE-2014-2319 2024-11-21 11:06 2014-03-14 Show GitHub Exploit DB Packet Storm
282308 - modx modx_revolution SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2014-2311 2024-11-21 11:06 2014-03-12 Show GitHub Exploit DB Packet Storm
282309 - zte f460
f660 		web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2321 2024-11-21 11:06 2014-03-11 Show GitHub Exploit DB Packet Storm
282310 - linux
opensuse
suse 		linux_kernel
opensuse
linux_enterprise_server 		The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory co… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-2309 2024-11-21 11:06 2014-03-11 Show GitHub Exploit DB Packet Storm