Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254101	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1288	2010-06-1 15:45	2010-05-11	Show	GitHub Exploit DB Packet Storm

254102	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1287	2010-06-1 15:45	2010-05-11	Show	GitHub Exploit DB Packet Storm

254103	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1286	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

254104	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1284	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

254105	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1283	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

254106	4.3	警告	レッドハット Glyph & Cog, LLC ターボリナックスサイバートラスト株式会社 CUPS	-	Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0166	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

254107	4.3	警告	Glyph & Cog, LLC アップルサイバートラスト株式会社 CUPS ターボリナックスレッドハット	-	Xpdf および CUPS の JBIG2 デコーダーにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0147	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

254108	4.3	警告	Glyph & Cog, LLC アップルサイバートラスト株式会社 CUPS ターボリナックスレッドハット	-	Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0146	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

254109	4.3	警告	アドビシステムズ	-	Adobe Shockwave Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1282	2010-05-31 18:27	2010-05-11	Show	GitHub Exploit DB Packet Storm

254110	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の iml32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1281	2010-05-31 18:26	2010-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277251	-		drupal	nivo_slider	Cross-site scripting (XSS) vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for Drupal allows remote authenticated users with the "administer nivo slider" permission to inject arbitrar…	CWE-79 Cross-site Scripting	CVE-2014-8744	2024-11-21 11:19	2014-10-14	Show	GitHub Exploit DB Packet Storm

277252	-		drupal	maestro	Multiple cross-site scripting (XSS) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or…	CWE-79 Cross-site Scripting	CVE-2014-8743	2024-11-21 11:19	2014-10-14	Show	GitHub Exploit DB Packet Storm

277253	9.1	CRITICAL Network	redhat	cloudforms_management_engine	A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x.	CWE-295 Improper Certificate Validation	CVE-2014-8164	2024-11-21 11:18	2022-07-7	Show	GitHub Exploit DB Packet Storm

277254	8.1	HIGH Network	google	android	btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which allows user-assisted remote attackers to bypass intended access restrictions via …	CWE-863 Incorrect Authorization	CVE-2014-7914	2024-11-21 11:18	2020-02-21	Show	GitHub Exploit DB Packet Storm

277255	4.6	MEDIUM Physics	google	android	Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate attackers with a direct connection to the target Android device to write to arbitr…	CWE-22 Path Traversal	CVE-2014-7951	2024-11-21 11:18	2020-02-21	Show	GitHub Exploit DB Packet Storm

277256	9.8	CRITICAL Network	zend redhat fedoraproject	zend_framework enterprise_linux fedora	SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands…	CWE-89 SQL Injection	CVE-2014-8089	2024-11-21 11:18	2020-02-18	Show	GitHub Exploit DB Packet Storm

277257	6.5	MEDIUM Network	libtiff	libtiff	LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.	CWE-787 Out-of-bounds Write	CVE-2014-8128	2024-11-21 11:18	2020-02-12	Show	GitHub Exploit DB Packet Storm

277258	7.8	HIGH Local	claris	filemaker_pro filemaker_pro_advanced	An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevat…	CWE-287 Improper Authentication	CVE-2014-8347	2024-11-21 11:18	2020-02-11	Show	GitHub Exploit DB Packet Storm

277259	7.5	HIGH Network	zohocorp	manageengine_it360 manageengine_opmanager manageengine_applications_manager	The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not proper…	CWE-200 Information Exposure	CVE-2014-7863	2024-11-21 11:18	2020-02-9	Show	GitHub Exploit DB Packet Storm

277260	6.8	MEDIUM Physics	tianocore	edk2	Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name.	CWE-120 Classic Buffer Overflow	CVE-2014-8271	2024-11-21 11:18	2020-02-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed