Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254771	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

254772	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

254773	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

254774	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

254775	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
284101	-	x.org canonical debian	libx11 ubuntu_linux debian_linux x11	Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted r…	CWE-189 Numeric Errors	CVE-2013-7439	2024-11-21 11:01	2015-04-16	Show	GitHub Exploit DB Packet Storm

284102	-	redhat	jboss_enterprise_brms_platform jboss_enterprise_application_platform	PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the app…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0005	2024-11-21 11:01	2015-02-21	Show	GitHub Exploit DB Packet Storm

284103	-	apache	tomcat	java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data af…	CWE-19 Data Processing Errors	CVE-2014-0227	2024-11-21 11:01	2015-02-16	Show	GitHub Exploit DB Packet Storm

284104	-	ovirt	ovirt	oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via scr…	CWE-200 Information Exposure	CVE-2014-0154	2024-11-21 11:01	2015-02-14	Show	GitHub Exploit DB Packet Storm

284105	-	redhat	ovirt-engine	Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack the authentication of users for requests that perform unspecified actions via a RE…	CWE-352 Origin Validation Error	CVE-2014-0151	2024-11-21 11:01	2015-02-14	Show	GitHub Exploit DB Packet Storm

284106	-	oracle	fusion_middleware	The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other pro…	NVD-CWE-noinfo	CVE-2014-0191	2024-11-21 11:01	2015-01-21	Show	GitHub Exploit DB Packet Storm

284107	-	redhat odata4j_project	jboss_data_virtualization odata4j	XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a…	NVD-CWE-Other	CVE-2014-0171	2024-11-21 11:01	2015-01-16	Show	GitHub Exploit DB Packet Storm

284108	-	redhat	jboss_enterprise_application_platform	JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2.3, use world-readable permissions on audit.log, which allows local users to obtain sensitive informat…	CWE-200 Information Exposure	CVE-2014-0059	2024-11-21 11:01	2014-11-18	Show	GitHub Exploit DB Packet Storm

284109	-	freerdp opensuse	freerdp opensuse	Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress f…	CWE-189 Numeric Errors	CVE-2014-0250	2024-11-21 11:01	2014-11-17	Show	GitHub Exploit DB Packet Storm

284110	-	apache	hive	Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated use…	CWE-284 Improper Access Control	CVE-2014-0228	2024-11-21 11:01	2014-11-17	Show	GitHub Exploit DB Packet Storm