Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254141 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1901 2010-09-1 15:17 2010-08-10 Show GitHub Exploit DB Packet Storm
254142 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1900 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
254143 9.3 危険 マイクロソフト - Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1898 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
254144 6.8 警告 マイクロソフト - Microsoft Windows のカーネルにおける権限を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1889 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
254145 6.8 警告 マイクロソフト - Microsoft Windows XP のカーネルにおける権限を取得される脆弱性 CWE-362
競合状態 		CVE-2010-1888 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
254146 9.3 危険 マイクロソフト - Microsoft Silverlight における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0019 2010-09-1 15:15 2010-08-10 Show GitHub Exploit DB Packet Storm
254147 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox の layout/generic/nsObjectFrame.cpp における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2755 2010-09-1 14:54 2010-07-20 Show GitHub Exploit DB Packet Storm
254148 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のローカルプログラムを実行させられる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1240 2010-09-1 14:52 2010-04-5 Show GitHub Exploit DB Packet Storm
254149 9.3 危険 マイクロソフト - Microsoft Windows の Secure Channel における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2566 2010-08-31 16:46 2010-08-10 Show GitHub Exploit DB Packet Storm
254150 9.3 危険 マイクロソフト - Microsoft XML Core Services における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2561 2010-08-31 16:45 2010-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268401 8.8 HIGH
Network 		omniauth omniauth The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without … CWE-352
 Origin Validation Error 		CVE-2015-9284 2024-11-21 11:40 2019-04-27 Show GitHub Exploit DB Packet Storm
268402 6.1 MEDIUM
Network 		grafana piechart-panel The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an atta… CWE-79
Cross-site Scripting 		CVE-2015-9282 2024-11-21 11:40 2019-02-7 Show GitHub Exploit DB Packet Storm
268403 6.1 MEDIUM
Network 		sas web_infrastructure_platform Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page. CWE-79
Cross-site Scripting 		CVE-2015-9281 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
268404 10.0 CRITICAL
Network 		mailenable mailenable MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter. CWE-611
XXE 		CVE-2015-9280 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
268405 6.1 MEDIUM
Network 		mailenable mailenable MailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in the body of an e-mail message. CWE-79
Cross-site Scripting 		CVE-2015-9279 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
268406 9.8 CRITICAL
Network 		mailenable mailenable MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request. CWE-255
Credentials Management 		CVE-2015-9278 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
268407 9.1 CRITICAL
Network 		mailenable mailenable MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting files because "/../" and "/.. /" are mishandled. CWE-22
Path Traversal 		CVE-2015-9277 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
268408 6.1 MEDIUM
Network 		smartertools smartermail SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms. It was possible to run JavaScript code when a victim user opens or replies to the attacker… CWE-79
Cross-site Scripting 		CVE-2015-9276 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
268409 5.3 MEDIUM
Network 		arc_project arc ARC 5.21q allows directory traversal via a full pathname in an archive file. CWE-22
Path Traversal 		CVE-2015-9275 2024-11-21 11:40 2019-01-8 Show GitHub Exploit DB Packet Storm
268410 6.5 MEDIUM
Network 		harfbuzz_project harfbuzz HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table mishandling, related to hb-ot-layout-gpos-t… CWE-125
Out-of-bounds Read 		CVE-2015-9274 2024-11-21 11:40 2018-11-15 Show GitHub Exploit DB Packet Storm