Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253661 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
253662 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
253663 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
253664 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
253665 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
253666 9.3 危険 マイクロソフト - Microsoft Internet Explorer において任意のコードが実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0249 2010-02-19 14:21 2010-01-15 Show GitHub Exploit DB Packet Storm
253667 7.5 危険 アップル
MySQL AB		 - MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-0227 2010-02-19 11:37 2008-01-10 Show GitHub Exploit DB Packet Storm
253668 7.5 危険 アップル
MySQL AB		 - MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0226 2010-02-19 11:32 2008-01-10 Show GitHub Exploit DB Packet Storm
253669 7.5 危険 Linux
レッドハット		 - Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
253670 7.8 危険 Linux
レッドハット		 - Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267421 9.0 CRITICAL
Network 		westermo weos Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanism… CWE-310
Cryptographic Issues 		CVE-2015-7923 2024-11-21 11:37 2016-01-30 Show GitHub Exploit DB Packet Storm
267422 7.7 HIGH
Network 		ntp
siemens
netapp
debian 		ntp
tim_4r-ie_firmware
tim_4r-ie_dnp3_firmware
oncommand_balance
clustered_data_ontap
debian_linux 		NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via a… CWE-287
Improper Authentication 		CVE-2015-7974 2024-11-21 11:37 2016-01-27 Show GitHub Exploit DB Packet Storm
267423 5.9 MEDIUM
Network 		wolfssl
opensuse
mariadb 		wolfssl
leap
opensuse
mariadb 		wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimization… NVD-CWE-noinfo
CVE-2015-7744 2024-11-21 11:37 2016-01-23 Show GitHub Exploit DB Packet Storm
267424 7.3 HIGH
Network 		hospira communication_engine
lifecare_pca_infusion_system 		Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attac… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-7909 2024-11-21 11:37 2016-01-22 Show GitHub Exploit DB Packet Storm
267425 3.7 LOW
Network 		netapp data_ontap NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors. CWE-200
Information Exposure 		CVE-2015-7886 2024-11-21 11:37 2016-01-18 Show GitHub Exploit DB Packet Storm
267426 3.7 LOW
Network 		f5 big-ip_analytics
big-ip_application_acceleration_manager
big-ip_link_controller
big-ip_advanced_firewall_manager
big-ip_policy_enforcement_manager
big-ip_local_traffic_manager
big-i… 		BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote atta… CWE-20
 Improper Input Validation  		CVE-2015-7759 2024-11-21 11:37 2016-01-13 Show GitHub Exploit DB Packet Storm
267427 7.8 HIGH
Local 		huawei p8_firmware
mate_7_firmware 		Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 bef… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8088 2024-11-21 11:37 2016-01-13 Show GitHub Exploit DB Packet Storm
267428 6.1 MEDIUM
Network 		ssp-europe secure_data_space Multiple cross-site scripting (XSS) vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to api/v3/public/shar… CWE-79
Cross-site Scripting 		CVE-2015-7706 2024-11-21 11:37 2016-01-12 Show GitHub Exploit DB Packet Storm
267429 9.6 CRITICAL
Network 		unitronics visilogic_oplc_ide Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-7939 2024-11-21 11:37 2016-01-9 Show GitHub Exploit DB Packet Storm
267430 9.8 CRITICAL
Network 		advantech eki-1321_series_firmware
eki-1322_series_firmware 		Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors. CWE-287
Improper Authentication 		CVE-2015-7938 2024-11-21 11:37 2016-01-9 Show GitHub Exploit DB Packet Storm