Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254211	10	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3384	2010-02-25 12:33	2009-11-11	Show	GitHub Exploit DB Packet Storm

254212	7.1	危険	Linux レッドハット	-	Linux kernel の icmp_send 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-0778	2010-02-25 12:33	2009-03-12	Show	GitHub Exploit DB Packet Storm

254213	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の audit_syscall_entry 関数におけるシステムコール監査設定を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-0834	2010-02-25 12:33	2009-03-6	Show	GitHub Exploit DB Packet Storm

254214	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の hrtimer_start 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2007-5966	2010-02-25 12:31	2007-12-20	Show	GitHub Exploit DB Packet Storm

254215	4.3	警告	シスコシステムズ	-	Cisco Secure Desktop の +CSCOT+/translation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0440	2010-02-24 12:27	2010-02-1	Show	GitHub Exploit DB Packet Storm

254216	6.2	警告	ヒューレット・パッカード	-	HP ECMT におけるデータベースにアクセスされる脆弱性	CWE-noinfo 情報不足	CVE-2009-4184	2010-02-24 12:27	2009-10-5	Show	GitHub Exploit DB Packet Storm

254217	4.6	警告	アップル	-	Apple iPhone OS のリカバリモードにおける任意のデータを読まれる脆弱性	CWE-399 リソース管理の問題	CVE-2010-0038	2010-02-24 12:26	2010-02-2	Show	GitHub Exploit DB Packet Storm

254218	5	警告	サン・マイクロシステムズ VMware	-	Sun Java SE におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3885	2010-02-24 12:26	2009-11-9	Show	GitHub Exploit DB Packet Storm

254219	7.5	危険	サン・マイクロシステムズ VMware	-	JDK および JRE の Java Update 機能における古いバージョンの脆弱性を利用される脆弱性	CWE-Other その他	CVE-2009-3864	2010-02-24 12:26	2009-11-3	Show	GitHub Exploit DB Packet Storm

254220	5	警告	アドビシステムズ	-	Adobe ColdFusion のデフォルト設定におけるコレクションのメタデータを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0185	2010-02-24 12:25	2010-01-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
280351	-		linux	linux_kernel	arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allows guest OS users to cause a denial of service (guest OS cr…	CWE-20 Improper Input Validation	CVE-2014-3645	2024-11-21 11:08	2014-11-10	Show	GitHub Exploit DB Packet Storm

280352	4.7	MEDIUM Local	linux redhat canonical debian	linux_kernel enterprise_linux ubuntu_linux debian_linux	Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS cras…	CWE-362 Race Condition	CVE-2014-3611	2024-11-21 11:08	2014-11-10	Show	GitHub Exploit DB Packet Storm

280353	5.5	MEDIUM Local	linux canonical debian opensuse suse	linux_kernel ubuntu_linux debian_linux evergreen suse_linux_enterprise_server	The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows g…	NVD-CWE-noinfo	CVE-2014-3610	2024-11-21 11:08	2014-11-10	Show	GitHub Exploit DB Packet Storm

280354	-		redhat canonical libreoffice opensuse	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server ubuntu_linux libreoffice opensuse	Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly ex…	NVD-CWE-Other	CVE-2014-3693	2024-11-21 11:08	2014-11-8	Show	GitHub Exploit DB Packet Storm

280355	-		debian qemu redhat canonical	debian_linux qemu enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node ubuntu_linux	The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and a…	CWE-476 NULL Pointer Dereference	CVE-2014-3640	2024-11-21 11:08	2014-11-8	Show	GitHub Exploit DB Packet Storm

280356	-		symantec	endpoint_protection_manager	ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors.	NVD-CWE-noinfo	CVE-2014-3439	2024-11-21 11:08	2014-11-7	Show	GitHub Exploit DB Packet Storm

280357	-		symantec	endpoint_protection_manager	Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow remote attackers to inject arbitrary web script o…	CWE-79 Cross-site Scripting	CVE-2014-3438	2024-11-21 11:08	2014-11-7	Show	GitHub Exploit DB Packet Storm

280358	-		symantec	endpoint_protection_manager	The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing …	NVD-CWE-Other	CVE-2014-3437	2024-11-21 11:08	2014-11-7	Show	GitHub Exploit DB Packet Storm

280359	-		php debian canonical	php debian_linux ubuntu_linux	The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to caus…	CWE-20 Improper Input Validation	CVE-2014-3710	2024-11-21 11:08	2014-11-5	Show	GitHub Exploit DB Packet Storm

280360	-		qemu	qemu	hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-3461	2024-11-21 11:08	2014-11-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed