Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255091 9 危険 オラクル - Oracle Database の Oracle OLAP コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3415 2010-02-12 12:20 2010-01-12 Show GitHub Exploit DB Packet Storm
255092 10 危険 オラクル - Oracle Database の Listener コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0071 2010-02-12 12:20 2010-01-12 Show GitHub Exploit DB Packet Storm
255093 5 警告 Pidgin
Adium
レッドハット		 - Pidgin および Adium の MSN プロトコルプラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0013 2010-02-10 13:39 2010-01-8 Show GitHub Exploit DB Packet Storm
255094 10 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat の U3D 実装における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-3959 2010-02-10 13:39 2010-01-12 Show GitHub Exploit DB Packet Storm
255095 10 危険 アドビシステムズ - Adobe Reader および Acrobat のダウンロードマネージャーにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-3958 2010-02-10 13:39 2010-01-12 Show GitHub Exploit DB Packet Storm
255096 5 警告 アドビシステムズ - Adobe Reader および Acrobat におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3957 2010-02-10 13:39 2010-01-12 Show GitHub Exploit DB Packet Storm
255097 10 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat におけるスクリプトインジェクションの脆弱性に関連した脆弱性 CWE-16
環境設定 		CVE-2009-3956 2010-02-10 13:39 2010-01-12 Show GitHub Exploit DB Packet Storm
255098 10 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3955 2010-02-10 13:38 2010-01-12 Show GitHub Exploit DB Packet Storm
255099 10 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat の 3D 実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3954 2010-02-10 13:38 2010-01-12 Show GitHub Exploit DB Packet Storm
255100 6.8 警告 サン・マイクロシステムズ - Sun Solaris の Trusted Extensions における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0310 2010-02-10 13:38 2010-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280221 9.8 CRITICAL
Network 		microsemi s350i_firmware SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers to execute arbitrary SQL commands via vectors involving a username. CWE-89
SQL Injection 		CVE-2014-5071 2024-11-21 11:11 2018-01-9 Show GitHub Exploit DB Packet Storm
280222 6.1 MEDIUM
Network 		microsemi s350i_firmware Cross-site scripting (XSS) vulnerability in Symmetricom s350i 2.70.15 allows remote attackers to inject arbitrary web script or HTML via vectors involving system logs. CWE-79
Cross-site Scripting 		CVE-2014-5069 2024-11-21 11:11 2018-01-9 Show GitHub Exploit DB Packet Storm
280223 9.8 CRITICAL
Network 		ajax_upload_for_gravity_forms_project ajax_upload_for_gravity_forms Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extensi… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2014-4972 2024-11-21 11:11 2018-01-9 Show GitHub Exploit DB Packet Storm
280224 5.5 MEDIUM
Local 		rawstudio
fedoraproject 		rawstudio
fedora 		The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on (1) /tmp/rs-filter-graph.png or (2) /tmp/rs-filter-gr… CWE-59
Link Following 		CVE-2014-4978 2024-11-21 11:11 2017-12-30 Show GitHub Exploit DB Packet Storm
280225 9.8 CRITICAL
Network 		zend
debian 		zend_framework
debian_linux 		The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspecified vectors. CWE-89
SQL Injection 		CVE-2014-4914 2024-11-21 11:11 2017-12-29 Show GitHub Exploit DB Packet Storm
280226 7.2 HIGH
Network 		landesk landesk_management_suite The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites via the d parameter to (1)… CWE-20
 Improper Input Validation  		CVE-2014-5362 2024-11-21 11:11 2017-09-20 Show GitHub Exploit DB Packet Storm
280227 8.8 HIGH
Network 		manageengine servicedesk_plus
assetexplorer
supportcenter
it360 		Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authenticated users to ex… CWE-22
Path Traversal 		CVE-2014-5302 2024-11-21 11:11 2017-08-29 Show GitHub Exploit DB Packet Storm
280228 8.8 HIGH
Network 		manageengine servicedesk_plus
assetexplorer
supportcenter
it360 		Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4. CWE-22
Path Traversal 		CVE-2014-5301 2024-11-21 11:11 2017-08-29 Show GitHub Exploit DB Packet Storm
280229 6.1 MEDIUM
Network 		good good_for_enterprise Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40. CWE-79
Cross-site Scripting 		CVE-2014-4925 2024-11-21 11:11 2017-08-29 Show GitHub Exploit DB Packet Storm
280230 5.4 MEDIUM
Network 		telescopeapp telescope Cross-site scripting (XSS) vulnerability in Telescope before 0.9.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted markdown. CWE-79
Cross-site Scripting 		CVE-2014-5144 2024-11-21 11:11 2017-08-10 Show GitHub Exploit DB Packet Storm