Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254771	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

254772	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

254773	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

254774	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

254775	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
298311	-	haxx apple fedoraproject debian canonical	libcurl mac_os_x fedora debian_linux ubuntu_linux	The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which a…	CWE-255 Credentials Management	CVE-2011-2192	2024-11-21 10:27	2011-07-8	Show	GitHub Exploit DB Packet Storm

298312	-	hongli_lai	libgnomesu	gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid function, which allows local users to gain privileges by…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-1946	2024-11-21 10:27	2011-07-8	Show	GitHub Exploit DB Packet Storm

298313	-	ffmpeg libav videolan	ffmpeg libav vlc_media_player	sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 and earlier and other products, performs a write op…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-1931	2024-11-21 10:27	2011-07-8	Show	GitHub Exploit DB Packet Storm

298314	-	hp	openview_storage_data_protector	Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXE…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-1866	2024-11-21 10:27	2011-07-1	Show	GitHub Exploit DB Packet Storm

298315	-	hp	openview_storage_data_protector	Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted par…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-1865	2024-11-21 10:27	2011-07-1	Show	GitHub Exploit DB Packet Storm

298316	-	rubyonrails	rails ruby_on_rails	The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it …	CWE-79 Cross-site Scripting	CVE-2011-2197	2024-11-21 10:27	2011-07-1	Show	GitHub Exploit DB Packet Storm

298317	-	apache	tomcat	Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creatio…	CWE-200 Information Exposure	CVE-2011-2204	2024-11-21 10:27	2011-06-30	Show	GitHub Exploit DB Packet Storm

298318	-	reallysimplechat	really_simple_chat	Multiple SQL injection vulnerabilities in A Really Simple Chat (ARSC) 3.3-rc2 allow remote attackers to execute arbitrary SQL commands via the (1) arsc_user parameter to base/admin/edit_user.php, (2)…	CWE-89 SQL Injection	CVE-2011-2181	2024-11-21 10:27	2011-06-30	Show	GitHub Exploit DB Packet Storm

298319	-	reallysimplechat	really_simple_chat	Cross-site scripting (XSS) vulnerability in dereferer.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsc_link parameter.	CWE-79 Cross-site Scripting	CVE-2011-2180	2024-11-21 10:27	2011-06-30	Show	GitHub Exploit DB Packet Storm

298320	-	videolan	vlc_media_player	Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unsp…	CWE-189 Numeric Errors	CVE-2011-2194	2024-11-21 10:27	2011-06-25	Show	GitHub Exploit DB Packet Storm