Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 19, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 255631 | 6.5 | 警告 | PostgreSQL.org サイバートラスト株式会社 ターボリナックス サン・マイクロシステムズ レッドハット |
- | PostgreSQL におけるインデックスの処理に関する権限を取得される脆弱性 |
CWE-Other
その他 |
CVE-2009-4136 | 2010-06-7 16:48 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 255632 | - | - | コンソナ | - | Consona (旧 SupportSoft) Intelligent Assistance Suite (IAS) に複数の脆弱性 | - | - | 2010-06-4 17:58 | 2010-05-13 | Show | GitHub Exploit DB Packet Storm |
| 255633 | 7.5 | 危険 | アップル VMware サン・マイクロシステムズ ヒューレット・パッカード レッドハット |
- | JDK および JRE の Java プラグインにおける古い JRE バージョンで動作可能な脆弱性 |
CWE-DesignError
|
CVE-2009-1105 | 2010-06-4 15:54 | 2009-03-24 | Show | GitHub Exploit DB Packet Storm |
| 255634 | 10 | 危険 | 日立 | - | Collaboration - Common Utility におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
- | 2010-06-3 15:19 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
| 255635 | 10 | 危険 | 日立 CA Technologies |
- | CA ARCserve Backup および BrightStor ARCserve Backup における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
- | 2010-06-3 15:19 | 2010-03-18 | Show | GitHub Exploit DB Packet Storm |
| 255636 | 6.4 | 警告 | サイバートラスト株式会社 MySQL AB ターボリナックス レッドハット |
- | MySQL における SSL サーバになりすまされる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-4028 | 2010-06-3 14:57 | 2009-11-4 | Show | GitHub Exploit DB Packet Storm |
| 255637 | 4 | 警告 | 富士通九州システムズ | - | e-Pares におけるセッション固定の脆弱性 |
CWE-Other
その他 |
CVE-2010-2149 | 2010-06-2 15:05 | 2010-06-2 | Show | GitHub Exploit DB Packet Storm |
| 255638 | 2.6 | 注意 | 富士通九州システムズ | - | e-Pares におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2010-2151 | 2010-06-2 15:04 | 2010-06-2 | Show | GitHub Exploit DB Packet Storm |
| 255639 | 4.3 | 警告 | 富士通九州システムズ | - | e-Pares におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2150 | 2010-06-2 15:02 | 2010-06-2 | Show | GitHub Exploit DB Packet Storm |
| 255640 | 2.1 | 注意 | アドビシステムズ | - | Adobe ColdFusion における重要な情報を取得される脆弱性 |
CWE-200 CWE-noinfo |
CVE-2010-1294 | 2010-06-2 12:14 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 19, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 271421 | 5.9 |
MEDIUM
Network |
ntp debian netapp oracle redhat |
ntp debian_linux oncommand_balance clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager linux enterprise_linux_desktop enterprise_linux_w… |
ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets. |
CWE-20
Improper Input Validation |
CVE-2015-7852 | 2024-11-21 11:37 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 271422 | 7.5 |
HIGH
Network |
ntp debian netapp redhat mcafee citrix |
ntp debian_linux clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager enterprise_linux_desktop enterprise_linux_workstation enterprise_linux… |
The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages. |
CWE-20
Improper Input Validation |
CVE-2015-7704 | 2024-11-21 11:37 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 271423 | 6.5 |
MEDIUM
Network |
ntp oracle debian netapp redhat |
ntp linux debian_linux clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager enterprise_linux_desktop enterprise_linux_workstation enterpr… |
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomple… |
CWE-20
Improper Input Validation |
CVE-2015-7702 | 2024-11-21 11:37 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 271424 | 7.5 |
HIGH
Network |
ntp oracle debian netapp redhat |
ntp linux debian_linux clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager enterprise_linux_desktop enterprise_linux_workstation enterpr… |
Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption). |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2015-7701 | 2024-11-21 11:37 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 271425 | 7.5 |
HIGH
Network |
ntp oracle debian netapp redhat |
ntp linux debian_linux clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager enterprise_linux_desktop enterprise_linux_workstation enterpr… |
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomple… |
CWE-20
Improper Input Validation |
CVE-2015-7692 | 2024-11-21 11:37 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 271426 | 7.5 |
HIGH
Network |
ntp oracle debian netapp redhat |
ntp linux debian_linux clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager enterprise_linux_desktop enterprise_linux_workstation enterpr… |
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey op… |
CWE-20
Improper Input Validation |
CVE-2015-7691 | 2024-11-21 11:37 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 271427 | 7.0 |
HIGH
Local |
samsung | samsung_mobile | Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with Android L(5.0/5.1) allows local users to trigger memory errors by leveraging def… |
CWE-362
Race Condition |
CVE-2015-7891 | 2024-11-21 11:37 | 2017-08-3 | Show | GitHub Exploit DB Packet Storm |
| 271428 | 7.5 |
HIGH
Network |
openpgpjs | openpgpjs | s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentic… |
CWE-310
Cryptographic Issues |
CVE-2015-8013 | 2024-11-21 11:37 | 2017-07-26 | Show | GitHub Exploit DB Packet Storm |
| 271429 | 9.8 |
CRITICAL
Network |
mediawiki | mediawiki | The MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11 does not properly validate the signature when checking the … |
CWE-255
Credentials Management |
CVE-2015-8009 | 2024-11-21 11:37 | 2017-07-25 | Show | GitHub Exploit DB Packet Storm |
| 271430 | 7.5 |
HIGH
Network |
ntp oracle debian netapp redhat |
ntp linux debian_linux clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager enterprise_linux_desktop enterprise_linux_workstation enterpr… |
The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address th… |
CWE-20
Improper Input Validation |
CVE-2015-7703 | 2024-11-21 11:37 | 2017-07-24 | Show | GitHub Exploit DB Packet Storm |