Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253901	9.3	危険	マイクロソフト	-	Microsoft Windows XP で提供される Adobe Flash Player 6 における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0378	2010-02-9 13:56	2010-01-12	Show	GitHub Exploit DB Packet Storm

253902	9.3	危険	マイクロソフト	-	Microsoft Windows の Embedded OpenType フォントエンジンにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0018	2010-02-9 13:55	2010-01-12	Show	GitHub Exploit DB Packet Storm

253903	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるファイル拡張子の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3461	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

253904	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3460	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

253905	4.3	警告	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-2995	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

253906	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-2989	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

253907	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat の画像デコーダにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-2984	2010-02-9 13:54	2009-10-13	Show	GitHub Exploit DB Packet Storm

253908	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3797	2010-02-9 12:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

253909	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3796	2010-02-9 12:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

253910	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3794	2010-02-9 12:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268481	5.5	MEDIUM Local	freereprintables	articlefr	Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local users to read arbitrary files via the s parameter.	CWE-22 Path Traversal	CVE-2015-6591	2024-11-21 11:35	2020-01-16	Show	GitHub Exploit DB Packet Storm

268482	8.8	HIGH Network	magento	magento	The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.…	CWE-20 Improper Input Validation	CVE-2015-6497	2024-11-21 11:35	2020-01-16	Show	GitHub Exploit DB Packet Storm

268483	7.5	HIGH Network	cloudera	cloudera_manager	There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles.	CWE-200 Information Exposure	CVE-2015-6495	2024-11-21 11:35	2019-11-26	Show	GitHub Exploit DB Packet Storm

268484	6.1	MEDIUM Network	edx	edx-platform	edx-platform before 2015-09-17 allows XSS via a team name.	CWE-79 Cross-site Scripting	CVE-2015-6960	2024-11-21 11:35	2019-07-30	Show	GitHub Exploit DB Packet Storm

268485	8.8	HIGH Network	moxa	softcms	Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-6458	2024-11-21 11:35	2019-03-22	Show	GitHub Exploit DB Packet Storm

268486	8.8	HIGH Network	moxa	softcms	Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-6457	2024-11-21 11:35	2019-03-22	Show	GitHub Exploit DB Packet Storm

268487	5.4	MEDIUM Network	schneider-electric	bmxnoc0401_firmware bmxnoe0100_firmware bmxnoe0110_firmware bmxnoe0110h_firmware bmxnor0200h_firmware modicon_m340_bmxp342020_firmware modicon_m340_bmxp342020h_firmware modicon_m…	Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, B…	CWE-79 Cross-site Scripting	CVE-2015-6462	2024-11-21 11:35	2019-03-22	Show	GitHub Exploit DB Packet Storm

268488	5.4	MEDIUM Network	schneider-electric	bmxnoc0401_firmware bmxnoe0100_firmware bmxnoe0110_firmware bmxnoe0110h_firmware bmxnor0200h_firmware modicon_m340_bmxp342020_firmware modicon_m340_bmxp342020h_firmware modicon_m…	Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP…	CWE-20 Improper Input Validation	CVE-2015-6461	2024-11-21 11:35	2019-03-22	Show	GitHub Exploit DB Packet Storm

268489	5.9	MEDIUM Network	atlassian	floodlight	Race condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and thread crash) via a stat…	CWE-362 CWE-476 Race Condition NULL Pointer Dereference	CVE-2015-6569	2024-11-21 11:35	2018-02-22	Show	GitHub Exploit DB Packet Storm

268490	6.1	MEDIUM Network	combodo	itop	Cross-site scripting (XSS) vulnerability in application/dashboard.class.inc.php in Combodo iTop before 2.2.0-2459 allows remote attackers to inject arbitrary web script or HTML via a dashboard title.	CWE-79 Cross-site Scripting	CVE-2015-6544	2024-11-21 11:35	2018-02-21	Show	GitHub Exploit DB Packet Storm