Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253431 5 警告 ヒューレット・パッカード
サイバートラスト株式会社
OpenSSL Project
ターボリナックス
レッドハット
- OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-4355 2010-05-13 17:21 2010-01-13 Show GitHub Exploit DB Packet Storm
253432 9.3 危険 日立 - XMAP3 における任意のコードが実行される脆弱性 CWE-noinfo
情報不足
- 2010-05-13 15:14 2010-04-12 Show GitHub Exploit DB Packet Storm
253433 4.3 警告 オラクル - Oracle Industry Product Suite の Retail - Oracle Retail Plan In-Season コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0863 2010-05-13 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
253434 4.3 警告 オラクル - Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0864 2010-05-13 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
253435 4.3 警告 オラクル - Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0862 2010-05-13 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
253436 4.3 警告 オラクル - Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0875 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
253437 4.3 警告 オラクル - Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0876 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
253438 4.3 警告 オラクル - Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0874 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
253439 4 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0879 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
253440 4 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0878 2010-05-13 15:11 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269451 7.4 HIGH
Network
ibm rational_clearcase The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates fro… CWE-310
Cryptographic Issues
CVE-2015-5039 2024-11-21 11:32 2018-03-27 Show GitHub Exploit DB Packet Storm
269452 7.5 HIGH
Network
cloudfoundry garden In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry … CWE-284
Improper Access Control
CVE-2015-5350 2024-11-21 11:32 2018-03-19 Show GitHub Exploit DB Packet Storm
269453 9.8 CRITICAL
Network
elastic elasticsearch Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377… CWE-74
Injection
CVE-2015-5377 2024-11-21 11:32 2018-03-7 Show GitHub Exploit DB Packet Storm
269454 7.5 HIGH
Network
blackcat-cms blackcat_cms Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the dl parameter. CWE-22
Path Traversal
CVE-2015-5079 2024-11-21 11:32 2018-03-1 Show GitHub Exploit DB Packet Storm
269455 5.9 MEDIUM
Network
w1.fi
debian
wpa_supplicant
debian_linux
The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a de… CWE-476
 NULL Pointer Dereference
CVE-2015-5316 2024-11-21 11:32 2018-02-22 Show GitHub Exploit DB Packet Storm
269456 5.9 MEDIUM
Network
w1.fi
debian
wpa_supplicant
debian_linux
The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a ne… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-5315 2024-11-21 11:32 2018-02-22 Show GitHub Exploit DB Packet Storm
269457 5.9 MEDIUM
Network
w1.fi
debian
wpa_supplicant
debian_linux
The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with (1) an interna… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-5314 2024-11-21 11:32 2018-02-22 Show GitHub Exploit DB Packet Storm
269458 8.8 HIGH
Network
pivotal_software
cloudfoundry
cloud_foundry_elastic_runtime
cloud_foundry_uaa
cf-release
Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails wit… CWE-200
Information Exposure
CVE-2015-5173 2024-11-21 11:32 2017-10-25 Show GitHub Exploit DB Packet Storm
269459 9.8 CRITICAL
Network
pivotal_software
cloudfoundry
cloud_foundry_elastic_runtime
cloud_foundry_uaa
cf-release
Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire … CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2015-5172 2024-11-21 11:32 2017-10-25 Show GitHub Exploit DB Packet Storm
269460 9.8 CRITICAL
Network
pivotal_software
cloudfoundry
cloud_foundry_elastic_runtime
cloud_foundry_uaa
cf-release
The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified im… CWE-613
 Insufficient Session Expiration
CVE-2015-5171 2024-11-21 11:32 2017-10-25 Show GitHub Exploit DB Packet Storm