Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253761 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
253762 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
253763 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
253764 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
253765 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279651 - ibm curam_social_program_management Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted… CWE-79
Cross-site Scripting 		CVE-2014-3013 2024-11-21 11:07 2014-06-19 Show GitHub Exploit DB Packet Storm
279652 - ibm curam_social_program_management Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 through 6.0.5.4 allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response spli… NVD-CWE-Other
CVE-2014-3012 2024-11-21 11:07 2014-06-19 Show GitHub Exploit DB Packet Storm
279653 - f5 arx_data_manager SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2014-2949 2024-11-21 11:07 2014-06-19 Show GitHub Exploit DB Packet Storm
279654 - puppet puppet_enterprise Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes. CWE-200
Information Exposure 		CVE-2014-3249 2024-11-21 11:07 2014-06-17 Show GitHub Exploit DB Packet Storm
279655 - cisco ios_xe The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the n… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-3290 2024-11-21 11:07 2014-06-14 Show GitHub Exploit DB Packet Storm
279656 - cisco nx-os The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via… CWE-287
Improper Authentication 		CVE-2014-3295 2024-11-21 11:07 2014-06-14 Show GitHub Exploit DB Packet Storm
279657 - castor_project
opensuse_project
opensuse 		castor
opensuse 		The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document. CWE-611
XXE 		CVE-2014-3004 2024-11-21 11:07 2014-06-11 Show GitHub Exploit DB Packet Storm
279658 - directfb
suse
opensuse 		directfb
linux_enterprise_software_development_kit
linux_enterprise_desktop
linux_enterprise_workstation_extension
opensuse
suse_linux_enterprise_server 		The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via th… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-2978 2024-11-21 11:07 2014-06-11 Show GitHub Exploit DB Packet Storm
279659 - suse
opensuse
directfb 		linux_enterprise_software_development_kit
linux_enterprise_desktop
linux_enterprise_workstation_extension
opensuse
suse_linux_enterprise_server
directfb 		Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and … CWE-189
Numeric Errors 		CVE-2014-2977 2024-11-21 11:07 2014-06-11 Show GitHub Exploit DB Packet Storm
279660 - google chrome Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-3157 2024-11-21 11:07 2014-06-11 Show GitHub Exploit DB Packet Storm