Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254841 7.5 危険 サイバートラスト株式会社
レッドハット
Alexander V. Lukyanov		 - LFTP の get1 コマンドにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2251 2010-08-26 16:57 2010-07-6 Show GitHub Exploit DB Packet Storm
254842 5 警告 日立 - JP1/Integrated Manager および JP1/Integrated Management 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:56 2010-07-30 Show GitHub Exploit DB Packet Storm
254843 5 警告 日立 - JP1/PAM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:56 2010-07-30 Show GitHub Exploit DB Packet Storm
254844 5 警告 日立 - JP1/AJS の組み込みDB利用製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:55 2010-07-30 Show GitHub Exploit DB Packet Storm
254845 5 警告 日立 - JP1/ServerConductor/Control Manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:55 2010-07-30 Show GitHub Exploit DB Packet Storm
254846 7.8 危険 日立 - Cosminexus 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:55 2010-07-30 Show GitHub Exploit DB Packet Storm
254847 4.3 警告 サイバートラスト株式会社
レッドハット		 - Apache Tomcat のサンプル用 calendar アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2696 2010-08-25 17:05 2010-08-2 Show GitHub Exploit DB Packet Storm
254848 4.3 警告 インターネットイニシアティブ - SEIL/X シリーズおよび SEIL/B1 における IPv6 Unicast RPF 機能に関する脆弱性 CWE-Other
その他 		CVE-2010-2363 2010-08-25 12:01 2010-08-25 Show GitHub Exploit DB Packet Storm
254849 4.6 警告 レッドハット - LVM2 のクラスタ論理ボリュームマネージャデーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2010-2526 2010-08-24 18:42 2010-07-28 Show GitHub Exploit DB Packet Storm
254850 9.3 危険 シマンテック
IBM		 - Autonomy KeyView の WordPerfect 5.x reader (wosr.dll) におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0135 2010-08-24 18:42 2010-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278771 - docker docker Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive ex… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9357 2024-11-21 11:20 2014-12-17 Show GitHub Exploit DB Packet Storm
278772 - firebirdsql
opensuse
debian
canonical 		firebird
evergreen
debian_linux
ubuntu_linux 		The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via a… CWE-476
 NULL Pointer Dereference 		CVE-2014-9323 2024-11-21 11:20 2014-12-17 Show GitHub Exploit DB Packet Storm
278773 - debian
sixapart 		debian_linux
movable_type 		SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified v… CWE-89
SQL Injection 		CVE-2014-9057 2024-11-21 11:20 2014-12-17 Show GitHub Exploit DB Packet Storm
278774 - pcre
mariadb
fedoraproject
opensuse
oracle
redhat 		pcre
mariadb
fedora
opensuse
solaris
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_tus
enterprise_linux_server_aus 		Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an asser… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-8964 2024-11-21 11:20 2014-12-17 Show GitHub Exploit DB Packet Storm
278775 - zenoss zenoss_core Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attackers to hijack sessions by leveraging an unattended workstation, aka ZEN-1269… NVD-CWE-Other
CVE-2014-9386 2024-11-21 11:20 2014-12-16 Show GitHub Exploit DB Packet Storm
278776 - zenoss zenoss_core Cross-site request forgery (CSRF) vulnerability in Zenoss Core through 5 Beta 3 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger arbitrary code execut… CWE-352
 Origin Validation Error 		CVE-2014-9385 2024-11-21 11:20 2014-12-16 Show GitHub Exploit DB Packet Storm
278777 - zenoss zenoss_core Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might allow local users to obtain sensitive information by reading database entries, aka ZEN-15416. CWE-200
Information Exposure 		CVE-2014-9252 2024-11-21 11:20 2014-12-16 Show GitHub Exploit DB Packet Storm
278778 - zenoss zenoss_core Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack on hash values in the d… CWE-255
Credentials Management 		CVE-2014-9251 2024-11-21 11:20 2014-12-16 Show GitHub Exploit DB Packet Storm
278779 - zenoss zenoss_core Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via s… CWE-200
Information Exposure 		CVE-2014-9250 2024-11-21 11:20 2014-12-16 Show GitHub Exploit DB Packet Storm
278780 - zenoss zenoss_core The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9249 2024-11-21 11:20 2014-12-16 Show GitHub Exploit DB Packet Storm