Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253731 6.8 警告 アップル
サイバートラスト株式会社
Python Software Foundation
サン・マイクロシステムズ
レッドハット
- Python の imageop.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2008-1679 2010-01-19 15:48 2008-04-22 Show GitHub Exploit DB Packet Storm
253732 5.8 警告 アップル
サイバートラスト株式会社
Python Software Foundation
サン・マイクロシステムズ
レッドハット
- Python の imageop モジュールにおける複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2007-4965 2010-01-19 15:47 2007-09-18 Show GitHub Exploit DB Packet Storm
253733 7.5 危険 アップル - Mac OS X 用の Java における任意のコードを実行される脆弱性 CWE-310
暗号の問題
CVE-2009-2843 2010-01-18 12:22 2009-12-3 Show GitHub Exploit DB Packet Storm
253734 6.8 警告 アップル
GNU Project
サン・マイクロシステムズ
サイバートラスト株式会社
レッドハット
- GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4131 2010-01-18 12:21 2007-08-23 Show GitHub Exploit DB Packet Storm
253735 4.6 警告 IBM - IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4150 2010-01-15 14:10 2009-12-2 Show GitHub Exploit DB Packet Storm
253736 2.1 注意 サン・マイクロシステムズ - Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2009-4080 2010-01-15 14:10 2009-11-24 Show GitHub Exploit DB Packet Storm
253737 5 警告 サン・マイクロシステムズ - Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-4075 2010-01-15 14:09 2009-11-23 Show GitHub Exploit DB Packet Storm
253738 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
253739 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション
CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
253740 9.3 危険 サン・マイクロシステムズ
VMware
- Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態
CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
299791 - linux
opensuse
suse
linux_kernel
opensuse
linux_enterprise_high_availability_extension
linux_enterprise_real_time
Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec s… CWE-190
 Integer Overflow or Wraparound
CVE-2010-3865 2024-11-21 10:19 2011-01-11 Show GitHub Exploit DB Packet Storm
299792 - gnu glibc ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs)… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3856 2024-11-21 10:19 2011-01-8 Show GitHub Exploit DB Packet Storm
299793 - gnu glibc elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which al… CWE-59
Link Following
CVE-2010-3847 2024-11-21 10:19 2011-01-8 Show GitHub Exploit DB Packet Storm
299794 - videolan vlc_media_player Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute a… CWE-189
Numeric Errors
CVE-2010-3907 2024-11-21 10:19 2011-01-4 Show GitHub Exploit DB Packet Storm
299795 - linux
debian
linux_kernel
debian_linux
The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from ker… CWE-909
 Missing Initialization of Resource
CVE-2010-3877 2024-11-21 10:19 2011-01-4 Show GitHub Exploit DB Packet Storm
299796 - linux
suse
opensuse
debian
linux_kernel
linux_enterprise_server
opensuse
linux_enterprise_desktop
linux_enterprise_software_development_kit
linux_enterprise_real_time_extension
debian_linux
net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel s… CWE-909
 Missing Initialization of Resource
CVE-2010-3876 2024-11-21 10:19 2011-01-4 Show GitHub Exploit DB Packet Storm
299797 - linux
debian
linux_kernel
debian_linux
The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information fro… CWE-200
Information Exposure
CVE-2010-3875 2024-11-21 10:19 2011-01-4 Show GitHub Exploit DB Packet Storm
299798 - linux
suse
opensuse
debian
linux_kernel
linux_enterprise_server
opensuse
debian_linux
The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service (heap memory corruption and panic) or possib… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3873 2024-11-21 10:19 2011-01-4 Show GitHub Exploit DB Packet Storm
299799 - mitsu_hiro_hi_rose attachecase Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory. NVD-CWE-Other
CVE-2010-3923 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
299800 - redhat jboss_enterprise_application_platform Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack th… CWE-352
 Origin Validation Error
CVE-2010-3878 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm