Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254761	5	警告	オラクル	-	Oracle Sun Management Center の Web コンソールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4436	2011-02-17 14:00	2011-01-18	Show	GitHub Exploit DB Packet Storm

254762	5	警告	オラクル	-	Oracle Solaris 10 の Ethernet および Driver sub-component における脆弱性	CWE-noinfo 情報不足	CVE-2010-4433	2011-02-17 13:59	2011-01-18	Show	GitHub Exploit DB Packet Storm

254763	5.7	警告	オラクル	-	Oracle GlassFish および Java System Message Queue における脆弱性	CWE-noinfo 情報不足	CVE-2010-4438	2011-02-17 13:59	2011-01-18	Show	GitHub Exploit DB Packet Storm

254764	6.4	警告	オラクル	-	Oracle Sun Convergence の Web メールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4464	2011-02-17 13:59	2011-01-18	Show	GitHub Exploit DB Packet Storm

254765	6.8	警告	サン・マイクロシステムズオラクル	-	Oracle Sun Java System Access Manager および Oracle OpenSSO における脆弱性	CWE-noinfo 情報不足	CVE-2010-4444	2011-02-17 13:58	2011-01-18	Show	GitHub Exploit DB Packet Storm

254766	6.8	警告	オラクル	-	Oracle VM VirtualBox の拡張モジュールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4414	2011-02-16 14:13	2011-01-18	Show	GitHub Exploit DB Packet Storm

254767	7.8	危険	オラクル	-	Oracle Solaris 11 Express の SMB および CIFS における脆弱性	CWE-noinfo 情報不足	CVE-2010-4457	2011-02-16 14:11	2011-01-18	Show	GitHub Exploit DB Packet Storm

254768	10	危険	ヒューレット・パッカード IBM オラクル	-	Oracle Solaris の CDE Calendar Manager Service Daemon および RPC における脆弱性	CWE-noinfo 情報不足	CVE-2010-4435	2011-02-16 14:07	2011-01-18	Show	GitHub Exploit DB Packet Storm

254769	2.1	注意	Apache Software Foundation オラクル	-	Apache Derby の BUILTIN 認証機能であるパスワードハッシュ生成アルゴリズムにおけるパスワードを解読される脆弱性	CWE-310 暗号の問題	CVE-2009-4269	2011-02-16 14:00	2011-01-18	Show	GitHub Exploit DB Packet Storm

254770	7.5	危険	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Argus Safety コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3593	2011-02-16 13:57	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275861	6.5	MEDIUM Network	juniper	junos	On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys o…	CWE-331 Insufficient Entropy	CVE-2015-3006	2024-11-21 11:28	2020-02-29	Show	GitHub Exploit DB Packet Storm

275862	6.1	MEDIUM Network	apache	struts	Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.	CWE-79 Cross-site Scripting	CVE-2015-2992	2024-11-21 11:28	2020-02-28	Show	GitHub Exploit DB Packet Storm

275863	6.5	MEDIUM Adjacent	freebsd	freebsd	The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advert…	CWE-20 Improper Input Validation	CVE-2015-2923	2024-11-21 11:28	2020-02-20	Show	GitHub Exploit DB Packet Storm

275864	9.8	CRITICAL Network	netvu	dv-ip_express_firmware sd-advanced_-_sdhd_firmware sd-advanced_8\/12\/16_vga_firmware sd_advanced_closed_iptv_\(m3u\)_firmware sd_advanced_non_closed_iptv_\(m3u\)_firmware sd_advanced_…	Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote a…	CWE-269 Improper Privilege Management	CVE-2015-2909	2024-11-21 11:28	2020-02-7	Show	GitHub Exploit DB Packet Storm

275865	7.5	HIGH Network	hp	asset_manager asset_manager_cloudsystem_chargeback sitescope	An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem …	CWE-200 Information Exposure	CVE-2015-2802	2024-11-21 11:28	2020-02-5	Show	GitHub Exploit DB Packet Storm

275866	6.1	MEDIUM Network	zend	zend_framework	CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct H…	CWE-74 Injection	CVE-2015-3154	2024-11-21 11:28	2020-01-28	Show	GitHub Exploit DB Packet Storm

275867	7.5	HIGH Network	torproject	tor	The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and app…	NVD-CWE-noinfo	CVE-2015-2929	2024-11-21 11:28	2020-01-25	Show	GitHub Exploit DB Packet Storm

275868	7.5	HIGH Network	torproject	tor	The Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote attackers to cause a denial of service (assertion failure and d…	NVD-CWE-noinfo	CVE-2015-2928	2024-11-21 11:28	2020-01-25	Show	GitHub Exploit DB Packet Storm

275869	9.8	CRITICAL Network	papercrop_project	papercrop	The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.	CWE-20 Improper Input Validation	CVE-2015-2784	2024-11-21 11:28	2020-01-22	Show	GitHub Exploit DB Packet Storm

275870	7.8	HIGH Local	redhat	automatic_bug_reporting_tool	The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, whi…	NVD-CWE-noinfo	CVE-2015-3159	2024-11-21 11:28	2020-01-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed