Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253861 5.8 警告 Mozilla Foundation
オラクル		 - 複数の Mozilla 製品の Math.random 関数におけるユーザを追跡される脆弱性 CWE-310
暗号の問題 		CVE-2010-3171 2011-01-20 13:51 2010-06-22 Show GitHub Exploit DB Packet Storm
253862 4.3 警告 Git project
レッドハット		 - Git の Gitweb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3906 2011-01-20 13:47 2010-12-14 Show GitHub Exploit DB Packet Storm
253863 9.3 危険 Google
レッドハット		 - Google Chrome の WebM libvpx におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-4203 2011-01-20 13:41 2010-11-4 Show GitHub Exploit DB Packet Storm
253864 10 危険 Ecava - Ecava IntegraXor にバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4597 2011-01-20 13:33 2010-12-20 Show GitHub Exploit DB Packet Storm
253865 9.3 危険 アドビシステムズ - Adobe PhotoShop における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3127 2011-01-20 13:29 2010-08-26 Show GitHub Exploit DB Packet Storm
253866 6.1 警告 アップル - 複数の Apple 製品上で稼働する ICMPv6 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-2189 2011-01-20 11:14 2010-12-22 Show GitHub Exploit DB Packet Storm
253867 7.1 危険 アップル - 複数の Apple 製品上で稼働するネットワークブリッジ機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1804 2011-01-19 16:36 2010-12-22 Show GitHub Exploit DB Packet Storm
253868 2.6 注意 アップル - 複数の Apple 製品上で稼働する Application-Level Gateway におけるデバイスの IP アドレスを使用される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0039 2011-01-19 16:34 2010-12-22 Show GitHub Exploit DB Packet Storm
253869 - - Invensys - Wonderware InBatch と I/A Series Batch の database lock manager service (lm_tcp) にバッファオーバーフローの脆弱性 - - 2011-01-19 15:54 2010-12-16 Show GitHub Exploit DB Packet Storm
253870 6.9 警告 Exim Development
レッドハット		 - Exim における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4345 2011-01-19 15:41 2010-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274661 8.8 HIGH
Network 		synametrics synaman
syncrify
syntail 		Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567 CWE-352
 Origin Validation Error 		CVE-2015-3140 2024-11-21 11:28 2019-11-22 Show GitHub Exploit DB Packet Storm
274662 6.1 MEDIUM
Network 		ikiwiki
fedoraproject 		ikiwiki
fedora 		Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openid_identifier parame… CWE-79
Cross-site Scripting 		CVE-2015-2793 2024-11-21 11:28 2019-11-22 Show GitHub Exploit DB Packet Storm
274663 7.5 HIGH
Network 		postgresql
debian
canonical 		postgresql
debian_linux
ubuntu_linux 		contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which … CWE-200
Information Exposure 		CVE-2015-3167 2024-11-21 11:28 2019-11-21 Show GitHub Exploit DB Packet Storm
274664 9.8 CRITICAL
Network 		postgresql
debian
canonical 		postgresql
debian_linux
ubuntu_linux 		The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-3166 2024-11-21 11:28 2019-11-21 Show GitHub Exploit DB Packet Storm
274665 6.1 MEDIUM
Network 		projectpier projectpier Multiple cross-site scripting (XSS) vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the search_for parameter to (1) search_by_tag.ph… CWE-79
Cross-site Scripting 		CVE-2015-2796 2024-11-21 11:28 2018-02-3 Show GitHub Exploit DB Packet Storm
274666 5.9 MEDIUM
Network 		yodobashi yodobashi The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a… CWE-295
Improper Certificate Validation  		CVE-2015-2981 2024-11-21 11:28 2018-01-13 Show GitHub Exploit DB Packet Storm
274667 9.8 CRITICAL
Network 		apache traffic_server The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service (out-of-bounds access and daemon crash) or possibly execute arbitrary … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-3249 2024-11-21 11:28 2017-10-30 Show GitHub Exploit DB Packet Storm
274668 8.8 HIGH
Network 		watchguard hawkeye_g Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of administrators for requests that (1) add arbitrary acco… CWE-352
 Origin Validation Error 		CVE-2015-2878 2024-11-21 11:28 2017-10-24 Show GitHub Exploit DB Packet Storm
274669 5.9 MEDIUM
Network 		fedoraproject spin-kickstarts fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-3229 2024-11-21 11:28 2017-10-17 Show GitHub Exploit DB Packet Storm
274670 9.8 CRITICAL
Network 		berta berta_cms Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct re… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2015-2780 2024-11-21 11:28 2017-10-17 Show GitHub Exploit DB Packet Storm