Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254791	5	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP のセッションシリアライザにおける任意のセッション変数に変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3065	2010-12-15 15:28	2010-05-31	Show	GitHub Exploit DB Packet Storm

254792	5	警告	日立	-	JP1/NETM 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-12-15 15:27	2010-07-30	Show	GitHub Exploit DB Packet Storm

254793	5	警告	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1917	2010-12-15 15:27	2010-05-11	Show	GitHub Exploit DB Packet Storm

254794	5	警告	The PHP Group アップルターボリナックスサイバートラスト株式会社レッドハット	-	PHP の xmlrpc 拡張におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0397	2010-12-15 15:27	2010-03-16	Show	GitHub Exploit DB Packet Storm

254795	6.4	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP の Linear Congruential Generator における値を推測される脆弱性	CWE-310 暗号の問題	CVE-2010-1128	2010-12-15 15:26	2010-03-26	Show	GitHub Exploit DB Packet Storm

254796	6.9	警告	GNU Project 日本電気ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Libtool の libltdl における権限昇格の脆弱性	CWE-DesignError	CVE-2009-3736	2010-12-15 15:26	2009-11-16	Show	GitHub Exploit DB Packet Storm

254797	6.4	警告	アップル日本電気 Fetchmail Project	-	fetchmail における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2666	2010-12-15 15:25	2009-08-6	Show	GitHub Exploit DB Packet Storm

254798	4.3	警告	アップル	-	Apple Safari の WebKit におけるロケーションバーの URL を偽装される脆弱性	CWE-Other その他	CVE-2010-3810	2010-12-15 14:42	2010-11-22	Show	GitHub Exploit DB Packet Storm

254799	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3809	2010-12-15 14:39	2010-11-22	Show	GitHub Exploit DB Packet Storm

254800	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3808	2010-12-15 14:37	2010-11-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
279521	-	imember360	imember360	Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote attackers to hijack the authentication of administrators for requests that…	CWE-352 Origin Validation Error	CVE-2014-8948	2024-11-21 11:19	2014-11-16	Show	GitHub Exploit DB Packet Storm

279522	-	uninett oracle	mod_auth_mellon linux	The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a "session overflo…	CWE-200 Information Exposure	CVE-2014-8566	2024-11-21 11:19	2014-11-16	Show	GitHub Exploit DB Packet Storm

279523	-	uninett redhat	mod_auth_mellon enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_server_eus	The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data.	CWE-399 Resource Management Errors	CVE-2014-8567	2024-11-21 11:19	2014-11-15	Show	GitHub Exploit DB Packet Storm

279524	-	magmi_project	magmi	Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users …	CWE-94 Code Injection	CVE-2014-8770	2024-11-21 11:19	2014-11-14	Show	GitHub Exploit DB Packet Storm

279525	-	gnu redhat opensuse canonical	gnutls enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node opensuse ubuntu_linux	The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds…	CWE-310 Cryptographic Issues	CVE-2014-8564	2024-11-21 11:19	2014-11-14	Show	GitHub Exploit DB Packet Storm

279526	-	jexperts	channel_platform	Multiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33_CCB allow remote attackers to inject arbitrary web script or HTML via the (1) usuario.nome variable in an edita…	CWE-79 Cross-site Scripting	CVE-2014-8557	2024-11-21 11:19	2014-11-14	Show	GitHub Exploit DB Packet Storm

279527	-	mantisbt	mantisbt	SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL commands via the proje…	CWE-89 SQL Injection	CVE-2014-8554	2024-11-21 11:19	2014-11-14	Show	GitHub Exploit DB Packet Storm

279528	-	freebsd	freebsd	The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users to obtain sensitive information from kernel memory via a ca…	CWE-200 Information Exposure	CVE-2014-8476	2024-11-21 11:19	2014-11-14	Show	GitHub Exploit DB Packet Storm

279529	-	open_atrium_project	open_atrium	The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that have been removed from a node by leveraging a previous revi…	CWE-200 Information Exposure	CVE-2014-8736	2024-11-21 11:19	2014-11-13	Show	GitHub Exploit DB Packet Storm

279530	-	bad_behavior_project	bad_behavior	The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" per…	CWE-200 Information Exposure	CVE-2014-8735	2024-11-21 11:19	2014-11-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed