Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254111	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングに対する保護メカニズムを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2768	2011-05-17 09:00	2010-09-7	Show	GitHub Exploit DB Packet Storm

254112	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるイントラネット上の Web サーバの存在を発見される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2764	2011-05-17 08:59	2010-09-7	Show	GitHub Exploit DB Packet Storm

254113	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla 製品の SafeJSObjectWrapper 実装におけるクローム特権で任意の JavaScript コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2762	2011-05-17 08:56	2010-09-7	Show	GitHub Exploit DB Packet Storm

254114	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3169	2011-05-17 08:55	2010-09-7	Show	GitHub Exploit DB Packet Storm

254115	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3168	2011-05-17 08:53	2010-09-7	Show	GitHub Exploit DB Packet Storm

254116	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsTreeContentView 関数における任意のコードを実行される脆弱性	CWE-119 CWE-399	CVE-2010-3167	2011-05-17 08:52	2010-09-7	Show	GitHub Exploit DB Packet Storm

254117	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsTextFrameUtils::TransformText 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3166	2011-05-17 08:50	2010-09-7	Show	GitHub Exploit DB Packet Storm

254118	4	警告	オラクル	-	OpenSSO Enterprise および Sun Java System Access Manager における脆弱性	CWE-noinfo 情報不足	CVE-2011-0847	2011-05-16 11:38	2011-04-19	Show	GitHub Exploit DB Packet Storm

254119	5	警告	オラクル	-	Oracle Sun Java System Access Manager Policy Agent における脆弱性	CWE-noinfo 情報不足	CVE-2011-0846	2011-05-16 11:37	2011-04-19	Show	GitHub Exploit DB Packet Storm

254120	4.3	警告	オラクル	-	OpenSSO Enterprise および Sun Java System Access Manager における脆弱性	CWE-noinfo 情報不足	CVE-2011-0844	2011-05-16 11:36	2011-04-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275091	6.1	MEDIUM Network	qdpm	qdpm	Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) search[keywords] parameter to index.php/users page; the (2) "…	CWE-79 Cross-site Scripting	CVE-2015-3883	2024-11-21 11:30	2017-03-17	Show	GitHub Exploit DB Packet Storm

275092	7.5	HIGH Network	dell	vce_vision_intelligent_operations	The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover th…	CWE-200 Information Exposure	CVE-2015-4057	2024-11-21 11:30	2017-02-22	Show	GitHub Exploit DB Packet Storm

275093	6.7	MEDIUM Local	dell	vce_vision_intelligent_operations	The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for local users to discover credentials by leveraging administrati…	CWE-310 Cryptographic Issues	CVE-2015-4056	2024-11-21 11:30	2017-02-22	Show	GitHub Exploit DB Packet Storm

275094	6.8	MEDIUM Network	unisys	mcp-firmware	Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service (data corruption or syst…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-4049	2024-11-21 11:30	2017-02-4	Show	GitHub Exploit DB Packet Storm

275095	9.8	CRITICAL Network	opensuse php	leap php	Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a f…	NVD-CWE-Other	CVE-2015-4116	2024-11-21 11:30	2016-05-16	Show	GitHub Exploit DB Packet Storm

275096	5.5	MEDIUM Local	linux	linux_kernel	The fs_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal consistency of a certain list data structure, which allows local users to cause a denial of service (system cra…	NVD-CWE-Other	CVE-2015-4178	2024-11-21 11:30	2016-05-2	Show	GitHub Exploit DB Packet Storm

275097	5.5	MEDIUM Local	linux	linux_kernel	The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a deni…	NVD-CWE-Other	CVE-2015-4177	2024-11-21 11:30	2016-05-2	Show	GitHub Exploit DB Packet Storm

275098	5.5	MEDIUM Local	linux	linux_kernel	fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary files by leveraging user-namespace root access for deletion of…	CWE-200 Information Exposure	CVE-2015-4176	2024-11-21 11:30	2016-05-2	Show	GitHub Exploit DB Packet Storm

275099	4.7	MEDIUM Local	linux redhat	linux_kernel enterprise_linux_for_ibm_z_systems_eus enterprise_linux_for_power_big_endian_eus enterprise_linux_server_eus enterprise_linux_for_power_little_endian_eus enterprise_linux_…	Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_do…	CWE-362 Race Condition	CVE-2015-4170	2024-11-21 11:30	2016-05-2	Show	GitHub Exploit DB Packet Storm

275100	5.4	MEDIUM Network	advantech	webaccess	Cross-site scripting (XSS) vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2015-3948	2024-11-21 11:30	2016-01-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed