Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253621	5	警告	Devon IT	-	Devon IT 製品に複数の脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3122	2010-09-16 15:42	2010-08-25	Show	GitHub Exploit DB Packet Storm

253622	6.4	警告	日立	-	JP1/NETM/Remote Control Agent における認証を回避される脆弱性	CWE-287 不適切な認証	-	2010-09-16 15:42	2010-08-31	Show	GitHub Exploit DB Packet Storm

253623	6.8	警告	ヒューレット・パッカード	-	HP HP-UX の Software Distributor における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2712	2010-09-15 17:18	2010-08-25	Show	GitHub Exploit DB Packet Storm

253624	6	警告	レッドハット	-	Red Hat Enterprise Linux の gdm におけるアクセス制限を回避される脆弱性	CWE-DesignError	CVE-2007-5079	2010-09-15 17:18	2007-09-25	Show	GitHub Exploit DB Packet Storm

253625	9.3	危険	ImageMagick GraphicsMagick レッドハット	-	ImageMagick および GraphicsMagick の XMakeImage 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1882	2010-09-15 17:17	2009-06-2	Show	GitHub Exploit DB Packet Storm

253626	3.3	注意	レッドハット	-	Firefox の SPICE プラグインにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-2794	2010-09-15 17:17	2010-08-25	Show	GitHub Exploit DB Packet Storm

253627	3.3	注意	レッドハット	-	Firefox の SPICE プラグインにおける重要な情報を取得される脆弱性	CWE-362 競合状態	CVE-2010-2792	2010-09-15 17:13	2010-08-25	Show	GitHub Exploit DB Packet Storm

253628	1.9	注意	シトリックス・システムズ	-	Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-2619	2010-09-14 15:55	2010-06-17	Show	GitHub Exploit DB Packet Storm

253629	4.6	警告	シトリックス・システムズ	-	Citrix XenServer における認証を回避され Xen API (XAPI) を実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0633	2010-09-14 15:54	2010-02-12	Show	GitHub Exploit DB Packet Storm

253630	4.3	警告	シトリックス・システムズ	-	複数の Citrix XenServer 製品の XenAPI HTTP インターフェイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3253	2010-09-14 15:54	2008-07-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
281921	5.5	MEDIUM Local	numpy	numpy	__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file.	CWE-20 Improper Input Validation	CVE-2014-1858	2024-11-21 11:05	2018-01-9	Show	GitHub Exploit DB Packet Storm

281922	9.8	CRITICAL Network	tapatalk	tapatalk	Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API r…	CWE-89 SQL Injection	CVE-2014-2023	2024-11-21 11:05	2017-10-27	Show	GitHub Exploit DB Packet Storm

281923	7.1	HIGH Local	perltidy_project	perltidy	The make_temporary_filename function in perltidy 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symlink attack, related to use of the tmpn…	CWE-284 Improper Access Control	CVE-2014-2277	2024-11-21 11:05	2017-10-18	Show	GitHub Exploit DB Packet Storm

281924	8.1	HIGH Network	percona	toolkit	The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the-middle attackers to obtain sensitive information or execute arbitrary code by leveraging use of HTTP to…	CWE-200 Information Exposure	CVE-2014-2029	2024-11-21 11:05	2017-09-29	Show	GitHub Exploit DB Packet Storm

281925	6.1	MEDIUM Network	viprinet	multichannel_vpn_router_300_firmware	Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 300 allow remote attackers to inject arbitrary web script or HTML via the usernam…	CWE-79 Cross-site Scripting	CVE-2014-2045	2024-11-21 11:05	2017-01-21	Show	GitHub Exploit DB Packet Storm

281926	6.5	MEDIUM Network	cisco	ios_xe ios	The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attack…	CWE-20 Improper Input Validation	CVE-2014-2146	2024-11-21 11:05	2016-09-23	Show	GitHub Exploit DB Packet Storm

281927	-		apache	tapestry	Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consum…	CWE-399 Resource Management Errors	CVE-2014-1972	2024-11-21 11:05	2015-08-23	Show	GitHub Exploit DB Packet Storm

281928	-		impresscms	impresscms	Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_pat…	CWE-22 Path Traversal	CVE-2014-1836	2024-11-21 11:05	2015-07-1	Show	GitHub Exploit DB Packet Storm

281929	-		cisco	telepresence_tc_software telepresence_te_software	Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local…	CWE-284 Improper Access Control	CVE-2014-2174	2024-11-21 11:05	2015-05-25	Show	GitHub Exploit DB Packet Storm

281930	-		y-cam	ycb004_firmware ycb002_firmware yck002_firmware yck003_firmware yceb03_firmware ycb001_firmware ycblhd5_firmware ycblb3_firmware ycblb3 ycb003_firmware ycw003_firmware	Multiple cross-site scripting (XSS) vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD…	CWE-79 Cross-site Scripting	CVE-2014-1902	2024-11-21 11:05	2015-05-14	Show	GitHub Exploit DB Packet Storm