Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253421 5.8 警告 オラクル - Oracle Sun Product Suite の Sun Java System Access Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0894 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
253422 6.8 警告 オラクル - Oracle Sun Product Suite の Sun Java System Communications Express コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0885 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
253423 7.1 危険 オラクル - Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0896 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
253424 7.2 危険 サン・マイクロシステムズ
オラクル
- Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0882 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
253425 7.5 危険 オラクル - Oracle Sun Product Suite の Sun Java System Directory Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0897 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
253426 10 危険 オラクル - Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0888 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
253427 5 警告 サン・マイクロシステムズ
Pidgin
レッドハット
- Pidgin の gtkimhtml.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0423 2010-05-14 18:39 2010-02-18 Show GitHub Exploit DB Packet Storm
253428 4.3 警告 サン・マイクロシステムズ
Pidgin
レッドハット
- Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0420 2010-05-14 18:38 2010-02-18 Show GitHub Exploit DB Packet Storm
253429 7.5 危険 Carnegie Mellon University (Project Cyrus)
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
オラクル
レッドハット
- Cyrus SASL ライブラリにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-0688 2010-05-14 18:37 2009-05-15 Show GitHub Exploit DB Packet Storm
253430 7.5 危険 サン・マイクロシステムズ
GNOME Project
レッドハット
- Evolution Data Server (別名 evolution-data-server) における複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-0587 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281111 - mediawiki mediawiki includes/upload/UploadBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 does not prevent use of invalid namespaces in SVG files, which allows remote atta… CWE-79
Cross-site Scripting
CVE-2014-2242 2024-11-21 11:05 2014-03-2 Show GitHub Exploit DB Packet Storm
281112 - cisco unified_communications_domain_manager Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) page in Cisco Unified Communications Domain Manager 9.0(.1) allow remote attackers to inject arbitrar… CWE-79
Cross-site Scripting
CVE-2014-2104 2024-11-21 11:05 2014-03-2 Show GitHub Exploit DB Packet Storm
281113 - ffmpeg ffmpeg The msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly calculate line sizes, which allows remote attackers to cause a denial of service (out-of-bounds array ac… CWE-189
Numeric Errors
CVE-2014-2099 2024-11-21 11:05 2014-03-2 Show GitHub Exploit DB Packet Storm
281114 - ffmpeg ffmpeg libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service (memory corruption) or po… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-2098 2024-11-21 11:05 2014-03-2 Show GitHub Exploit DB Packet Storm
281115 - ffmpeg ffmpeg The tak_decode_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service (out… CWE-20
 Improper Input Validation 
CVE-2014-2097 2024-11-21 11:05 2014-03-2 Show GitHub Exploit DB Packet Storm
281116 - ffmpeg ffmpeg The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vecto… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-2263 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
281117 - sas base_sas Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-2262 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
281118 - python
apple
python
mac_os_x
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1912 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
281119 - modx modx_revolution Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter. CWE-79
Cross-site Scripting
CVE-2014-2080 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
281120 - jenkins jenkins Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a … CWE-79
Cross-site Scripting
CVE-2014-2067 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm