Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255321 6.9 警告 acpid - acpid の umask におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4235 2010-01-21 11:44 2009-12-7 Show GitHub Exploit DB Packet Storm
255322 6.9 警告 サイバートラスト株式会社
レッドハット
acpid		 - acpid のレッドハットパッチにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4033 2010-01-21 11:43 2009-12-7 Show GitHub Exploit DB Packet Storm
255323 10 危険 アドビシステムズ - Adobe Illustrator における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-3952 2010-01-21 11:43 2010-01-7 Show GitHub Exploit DB Packet Storm
255324 9.3 危険 アドビシステムズ - Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4195 2010-01-21 11:43 2009-12-4 Show GitHub Exploit DB Packet Storm
255325 4.4 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1337 2010-01-21 11:23 2009-04-22 Show GitHub Exploit DB Packet Storm
255326 4.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel における sendmsg 関数の呼び出しに関するサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5300 2010-01-21 11:22 2008-12-1 Show GitHub Exploit DB Packet Storm
255327 6.8 警告 シスコシステムズ - 複数の SSL VPN (Web VPN) 製品においてウェブブラウザのセキュリティが迂回される問題 CWE-264
認可・権限・アクセス制御 		CVE-2009-2631 2010-01-20 14:15 2009-12-1 Show GitHub Exploit DB Packet Storm
255328 4.4 警告 DAG
レッドハット		 - dstat における Python module の検索パスに関する権限昇格の脆弱性 CWE-Other
その他 		CVE-2009-3894 2010-01-20 14:15 2009-11-29 Show GitHub Exploit DB Packet Storm
255329 6.4 警告 OSIsoft - PI Server の OSIsoft PI System におけるデータベースの情報を変更される脆弱性 CWE-310
暗号の問題 		CVE-2009-0209 2010-01-20 14:14 2009-10-1 Show GitHub Exploit DB Packet Storm
255330 9.3 危険 サン・マイクロシステムズ
freedesktop.org
レッドハット
サイバートラスト株式会社
Glyph & Cog, LLC		 - Xpdf および Poppler の PSOutputDev::doImageL1Sep 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3606 2010-01-20 11:57 2009-10-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269621 7.5 HIGH
Network 		varnish_cache_project
debian 		varnish_cache
debian_linux 		Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated… NVD-CWE-Other
CVE-2015-8852 2024-11-21 11:39 2016-04-25 Show GitHub Exploit DB Packet Storm
269622 8.8 HIGH
Network 		adobe flash_player
air
air_sdk
air_sdk_\&_compiler
flash_player_desktop_runtime 		Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, A… CWE-416
 Use After Free 		CVE-2015-8823 2024-11-21 11:39 2016-04-23 Show GitHub Exploit DB Packet Storm
269623 3.3 LOW
Local 		opensuse opensuse tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8842 2024-11-21 11:39 2016-04-21 Show GitHub Exploit DB Packet Storm
269624 9.8 CRITICAL
Network 		suse
opensuse
canonical
debian
gnu
fedoraproject 		linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_debuginfo
linux_enterprise_software_development_kit
opensuse
suse_linux_enterprise_server
ubuntu_linux
debian_li… 		Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possib… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8779 2024-11-21 11:39 2016-04-20 Show GitHub Exploit DB Packet Storm
269625 9.8 CRITICAL
Network 		fedoraproject
debian
canonical
gnu
suse
opensuse 		fedora
debian_linux
ubuntu_linux
glibc
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_debuginfo
linux_enterprise_software_development_kit
opensuse
suse_l… 		Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the s… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8778 2024-11-21 11:39 2016-04-20 Show GitHub Exploit DB Packet Storm
269626 9.1 CRITICAL
Network 		suse
opensuse
canonical
debian
fedoraproject
gnu 		linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_debuginfo
linux_enterprise_software_development_kit
opensuse
suse_linux_enterprise_server
ubuntu_linux
debian_li… 		The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive informatio… CWE-189
Numeric Errors 		CVE-2015-8776 2024-11-21 11:39 2016-04-20 Show GitHub Exploit DB Packet Storm
269627 7.5 HIGH
Network 		xmlsoft
canonical
debian 		libxml2
ubuntu_linux
debian_linux 		dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring… NVD-CWE-noinfo
CVE-2015-8806 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
269628 6.5 MEDIUM
Network 		libtiff
debian 		libtiff
debian_linux 		The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif. CWE-787
 Out-of-bounds Write 		CVE-2015-8784 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
269629 6.1 MEDIUM
Network 		fedoraproject
horde
debian 		fedora
groupware
debian_linux 		Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Web… CWE-79
Cross-site Scripting 		CVE-2015-8807 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
269630 7.4 HIGH
Local 		foxitsoftware foxit_reader The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8843 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm