Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253721 6.6 警告 マイクロソフト - Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1897 2010-09-3 12:00 2010-08-10 Show GitHub Exploit DB Packet Storm
253722 6.8 警告 マイクロソフト - Windows の Windows Service Isolation 機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1886 2010-09-2 14:07 2010-08-10 Show GitHub Exploit DB Packet Storm
253723 6.8 警告 マイクロソフト - Windows のサービスのトレース機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2554 2010-09-2 14:06 2010-08-10 Show GitHub Exploit DB Packet Storm
253724 6.8 警告 マイクロソフト - Windows のサービスのトレース機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2555 2010-09-2 14:06 2010-08-10 Show GitHub Exploit DB Packet Storm
253725 6.8 警告 マイクロソフト - Windwos の TCP/IP スタックにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1893 2010-09-2 14:06 2010-08-10 Show GitHub Exploit DB Packet Storm
253726 9.3 危険 マイクロソフト - Microsoft Office Excel および Open XML File Format Converter における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2562 2010-09-2 14:05 2010-08-10 Show GitHub Exploit DB Packet Storm
253727 9.3 危険 マイクロソフト - Microsoft Windows Movie Maker におけるバッファオーバーフローの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2564 2010-09-2 14:05 2010-08-10 Show GitHub Exploit DB Packet Storm
253728 6.6 警告 マイクロソフト - Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1896 2010-09-2 14:05 2010-08-10 Show GitHub Exploit DB Packet Storm
253729 6.6 警告 マイクロソフト - Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1895 2010-09-2 14:04 2010-08-10 Show GitHub Exploit DB Packet Storm
253730 6.6 警告 マイクロソフト - Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1894 2010-09-2 14:04 2010-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282381 - openstack compute The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denia… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2573 2024-11-21 11:06 2014-03-26 Show GitHub Exploit DB Packet Storm
282382 - opensuse
icinga 		opensuse
icinga 		Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service (crash) via unspecified vectors to the (1) display_nav_table, (2) print_export_l… CWE-189
Numeric Errors 		CVE-2014-2386 2024-11-21 11:06 2014-03-26 Show GitHub Exploit DB Packet Storm
282383 - net-snmp net-snmp The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a deni… CWE-20
 Improper Input Validation  		CVE-2014-2284 2024-11-21 11:06 2014-03-25 Show GitHub Exploit DB Packet Storm
282384 - linux
canonical 		linux_kernel
ubuntu_linux 		Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory… CWE-416
 Use After Free 		CVE-2014-2568 2024-11-21 11:06 2014-03-25 Show GitHub Exploit DB Packet Storm
282385 - linux
canonical 		linux_kernel
ubuntu_linux 		net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibl… CWE-20
 Improper Input Validation  		CVE-2014-2523 2024-11-21 11:06 2014-03-25 Show GitHub Exploit DB Packet Storm
282386 - sonicwall nsa_2400 Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting 		CVE-2014-2589 2024-11-21 11:06 2014-03-25 Show GitHub Exploit DB Packet Storm
282387 - mcafee asset_manager Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the reportFileName parameter. CWE-22
Path Traversal 		CVE-2014-2588 2024-11-21 11:06 2014-03-25 Show GitHub Exploit DB Packet Storm
282388 - mcafee asset_manager SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka us… CWE-89
SQL Injection 		CVE-2014-2587 2024-11-21 11:06 2014-03-25 Show GitHub Exploit DB Packet Storm
282389 - mcafee cloud_single_sign_on Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbitrary web script or HTML via a crafted password. CWE-79
Cross-site Scripting 		CVE-2014-2586 2024-11-21 11:06 2014-03-25 Show GitHub Exploit DB Packet Storm
282390 - owncloud owncloud ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local filesystem in the user's ownCloud via the mount configuration. CWE-20
 Improper Input Validation  		CVE-2014-2585 2024-11-21 11:06 2014-03-25 Show GitHub Exploit DB Packet Storm