Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255171	9.3	危険	マイクロソフト	-	Microsoft Windows の kernel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2514	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

255172	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2513	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

255173	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

255174	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

255175	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

255176	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

255177	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304491	-		mit opensuse fedoraproject redhat debian canonical	kerberos_5 opensuse fedora enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_eus debian_linux ubunt…	schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial o…	CWE-20 Improper Input Validation	CVE-2002-2443	2024-11-21 08:43	2013-05-29	Show	GitHub Exploit DB Packet Storm

304492	-		mozilla	firefox thunderbird seamonkey	The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getC…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-2437	2024-11-21 08:43	2011-12-8	Show	GitHub Exploit DB Packet Storm

304493	-		mozilla	firefox thunderbird seamonkey	The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote…	CWE-200 Information Exposure	CVE-2002-2436	2024-11-21 08:43	2011-12-8	Show	GitHub Exploit DB Packet Storm

304494	-		microsoft	internet_explorer ie	The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive in…	CWE-200 Information Exposure	CVE-2002-2435	2024-11-21 08:43	2011-12-8	Show	GitHub Exploit DB Packet Storm

304495	7.5	HIGH Network	balasys siemens suse f5 hpe stormshield	dheater scalance_w1750d_firmware linux_enterprise_server big-iq_centralized_management traffix_signaling_delivery_controller big-ip_service_proxy big-ip_access_policy_manager big…	The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exp…	CWE-400 Uncontrolled Resource Consumption	CVE-2002-20001	2024-11-21 08:42	2021-11-12	Show	GitHub Exploit DB Packet Storm

304496	-		gehealthcare	entegra_p\&r	GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, (3) 0 for the entegra user of the Codonics p…	CWE-255 Credentials Management	CVE-2001-1594	2024-11-21 08:38	2015-08-4	Show	GitHub Exploit DB Packet Storm

304497	-		gnu	a2ps	The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink atta…	CWE-59 Link Following	CVE-2001-1593	2024-11-21 08:38	2014-04-6	Show	GitHub Exploit DB Packet Storm

304498	7.5	HIGH Network	openssl	openssl	crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection…	CWE-310 Cryptographic Issues	CVE-2000-1254	2024-11-21 08:34	2016-05-5	Show	GitHub Exploit DB Packet Storm

304499	-		apache	jserv	The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensiti…	CWE-16 Configuration	CVE-2000-1247	2024-11-21 08:34	2011-10-5	Show	GitHub Exploit DB Packet Storm

304500	9.8	CRITICAL Network	gnu	glibc	manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dan…	CWE-252 Unchecked Return Value	CVE-1999-0199	2024-11-21 08:28	2020-10-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed