Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254571 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0151 2011-04-4 14:45 2011-03-3 Show GitHub Exploit DB Packet Storm
254572 10 危険 Wireshark
レッドハット
- Wireshark の MAC-LTE 解析部におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0444 2011-04-4 14:38 2011-01-11 Show GitHub Exploit DB Packet Storm
254573 5 警告 サイバートラスト株式会社
Wireshark
レッドハット
オラクル
- Wireshark の BER 解析部の dissect_ber_unknown 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-3445 2011-04-4 14:36 2010-10-11 Show GitHub Exploit DB Packet Storm
254574 5 警告 The PHP Group
アップル
- PHP にサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2010-4409 2011-04-4 14:32 2010-12-1 Show GitHub Exploit DB Packet Storm
254575 5 警告 The PHP Group
アップル
- PHP の IMAP 拡張 (ext/imap/php_imap.c) における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-4150 2011-04-4 14:31 2010-12-7 Show GitHub Exploit DB Packet Storm
254576 6.8 警告 The PHP Group
アップル
サイバートラスト株式会社
レッドハット
- PHP の utf8_decode 関数におけるクロスサイトスクリプティングおよび SQL インジェクションに対する保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3870 2011-04-4 14:29 2009-09-27 Show GitHub Exploit DB Packet Storm
254577 9.3 危険 アップル - Apple QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-4009 2011-04-4 14:28 2010-12-9 Show GitHub Exploit DB Packet Storm
254578 6.8 警告 アップル
FreeType Project
オラクル
- FreeType の ttinterp.c 内にある Ins_SHZ 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3814 2011-04-4 14:27 2010-11-26 Show GitHub Exploit DB Packet Storm
254579 9.3 危険 アップル - Apple QuickTime における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2010-3802 2011-04-4 14:23 2010-12-9 Show GitHub Exploit DB Packet Storm
254580 9.3 危険 アップル - Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-3801 2011-04-4 14:22 2010-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275411 - phpwind phpwind Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. NVD-CWE-Other
CVE-2015-4134 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
275412 - reflex_gallery_project reflex_gallery Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading… NVD-CWE-Other
CVE-2015-4133 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
275413 - arubanetworks clearpass_policy_manager Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified v… CWE-79
Cross-site Scripting
CVE-2015-4132 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
275414 - church_admin_project church_admin Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrate… CWE-79
Cross-site Scripting
CVE-2015-4127 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
275415 - free-counter free_counter Cross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value_ parameter in a check_stat action to… CWE-79
Cross-site Scripting
CVE-2015-4084 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
275416 - tri gigpress Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) show_arti… CWE-89
SQL Injection
CVE-2015-4066 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
275417 - landing_pages_project landing_pages Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to inject arbitrary web s… CWE-79
Cross-site Scripting
CVE-2015-4065 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
275418 - landing_pages_project landing_pages SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the post pa… CWE-89
SQL Injection
CVE-2015-4064 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
275419 - newstatpress_project newstatpress Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2015-4063 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
275420 - newstatpress_project newstatpress SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the where1 paramet… CWE-89
SQL Injection
CVE-2015-4062 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm