Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254061 7.5 危険 IBM
サイバートラスト株式会社
サン・マイクロシステムズ
Sendmail Consortium
ターボリナックス
ヒューレット・パッカード
レッドハット		 - sendmail における X.509 証明書の処理に関する任意の SSL-based SMTP サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-4565 2011-05-26 09:52 2010-01-4 Show GitHub Exploit DB Packet Storm
254062 5 警告 シックス・アパート株式会社 - Movable Type におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5845 2011-05-25 14:03 2011-05-25 Show GitHub Exploit DB Packet Storm
254063 9.3 危険 マイクロソフト - Microsoft PowerPoint におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1270 2011-05-25 12:24 2011-05-10 Show GitHub Exploit DB Packet Storm
254064 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1269 2011-05-25 12:22 2011-05-10 Show GitHub Exploit DB Packet Storm
254065 9.3 危険 マイクロソフト - Microsoft Windows の WINS における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1248 2011-05-25 12:15 2011-05-10 Show GitHub Exploit DB Packet Storm
254066 7.5 危険 サムスン - Samsung Integrated Management System DMS に SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4284 2011-05-25 12:12 2011-05-9 Show GitHub Exploit DB Packet Storm
254067 5 警告 VMware - 複数の VMware 製品の self-extracting インストーラにおけるソフトウェアの配布を偽造される脆弱性 CWE-310
暗号の問題 		CVE-2011-1789 2011-05-25 12:09 2011-05-5 Show GitHub Exploit DB Packet Storm
254068 - - Proofpoint, Inc. - Proofpoint Protection Server に複数の脆弱性 - - 2011-05-25 12:07 2011-05-6 Show GitHub Exploit DB Packet Storm
254069 5.1 警告 Aleksey
レッドハット		 - WebKit などで利用される xslt.c における任意のファイルを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1425 2011-05-24 10:03 2011-03-31 Show GitHub Exploit DB Packet Storm
254070 6.8 警告 Konstanty Bialkowski
レッドハット		 - libmodplug の load_s3m.cpp 内にある ReadS3M メソッドにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1574 2011-05-24 10:03 2011-05-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275741 - wireshark wireshark The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to ca… CWE-189
Numeric Errors 		CVE-2015-3809 2024-11-21 11:29 2015-05-27 Show GitHub Exploit DB Packet Storm
275742 - wireshark wireshark The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial … CWE-189
Numeric Errors 		CVE-2015-3808 2024-11-21 11:29 2015-05-27 Show GitHub Exploit DB Packet Storm
275743 - wppa.opajaap wp-photo-album-plus Multiple cross-site scripting (XSS) vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus (aka WPPA) plugin before 6.1.3 for WordPress allow remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2015-3647 2024-11-21 11:29 2015-05-22 Show GitHub Exploit DB Packet Storm
275744 - module-signature_project
canonical 		module-signature
ubuntu_linux 		Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan h… NVD-CWE-Other
CVE-2015-3409 2024-11-21 11:29 2015-05-20 Show GitHub Exploit DB Packet Storm
275745 - module-signature_project
canonical 		module-signature
ubuntu_linux 		Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest. CWE-77
Command Injection 		CVE-2015-3408 2024-11-21 11:29 2015-05-20 Show GitHub Exploit DB Packet Storm
275746 - canonical
module-signature_project 		ubuntu_linux
module-signature 		Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files. CWE-284
Improper Access Control 		CVE-2015-3407 2024-11-21 11:29 2015-05-20 Show GitHub Exploit DB Packet Storm
275747 - docker docker Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-3631 2024-11-21 11:29 2015-05-19 Show GitHub Exploit DB Packet Storm
275748 - docker docker Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-3630 2024-11-21 11:29 2015-05-19 Show GitHub Exploit DB Packet Storm
275749 7.8 HIGH
Local 		docker
opensuse 		libcontainer
opensuse 		Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an imag… CWE-59
Link Following 		CVE-2015-3629 2024-11-21 11:29 2015-05-19 Show GitHub Exploit DB Packet Storm
275750 - docker libcontainer
docker 		Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an … CWE-59
Link Following 		CVE-2015-3627 2024-11-21 11:29 2015-05-19 Show GitHub Exploit DB Packet Storm