Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254021 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266501 6.1 MEDIUM
Network 		bestwebsoft relevant The relevant plugin before 1.0.8 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2015-9384 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
266502 6.5 MEDIUM
Network 		freetype
debian
canonical 		freetype
debian_linux
ubuntu_linux 		FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. CWE-125
Out-of-bounds Read 		CVE-2015-9383 2024-11-21 11:40 2019-09-3 Show GitHub Exploit DB Packet Storm
266503 6.5 MEDIUM
Network 		freetype
debian 		freetype
debian_linux 		FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation. CWE-125
Out-of-bounds Read 		CVE-2015-9382 2024-11-21 11:40 2019-09-3 Show GitHub Exploit DB Packet Storm
266504 8.8 HIGH
Network 		freetype
debian 		freetype
debian_linux 		FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. CWE-125
Out-of-bounds Read 		CVE-2015-9381 2024-11-21 11:40 2019-09-3 Show GitHub Exploit DB Packet Storm
266505 8.8 HIGH
Network 		10web photo_gallery The photo-gallery plugin before 1.2.42 for WordPress has CSRF. CWE-352
 Origin Validation Error 		CVE-2015-9380 2024-11-21 11:40 2019-08-30 Show GitHub Exploit DB Packet Storm
266506 6.1 MEDIUM
Network 		automattic jetpack The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg(). CWE-79
Cross-site Scripting 		CVE-2015-9359 2024-11-21 11:40 2019-08-29 Show GitHub Exploit DB Packet Storm
266507 6.1 MEDIUM
Network 		ithemes builder_style_manager iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg(). CWE-79
Cross-site Scripting 		CVE-2015-9379 2024-11-21 11:40 2019-08-28 Show GitHub Exploit DB Packet Storm
266508 6.1 MEDIUM
Network 		ithemes builder_theme_market iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg(). CWE-79
Cross-site Scripting 		CVE-2015-9378 2024-11-21 11:40 2019-08-28 Show GitHub Exploit DB Packet Storm
266509 6.1 MEDIUM
Network 		ithemes builder_theme_depot iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg(). CWE-79
Cross-site Scripting 		CVE-2015-9377 2024-11-21 11:40 2019-08-28 Show GitHub Exploit DB Packet Storm
266510 6.1 MEDIUM
Network 		ithemes mobile iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg(). CWE-79
Cross-site Scripting 		CVE-2015-9376 2024-11-21 11:40 2019-08-28 Show GitHub Exploit DB Packet Storm