Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 10:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255761	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3982	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

255762	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3981	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

255763	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3980	2010-01-28 12:15	2009-12-15	Show	GitHub Exploit DB Packet Storm

255764	10	危険	アドビシステムズ	-	Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3792	2010-01-27 10:02	2009-12-18	Show	GitHub Exploit DB Packet Storm

255765	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3791	2010-01-27 10:02	2009-12-18	Show	GitHub Exploit DB Packet Storm

255766	5.8	警告	PostgreSQL.org ターボリナックスサン・マイクロシステムズ	-	PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4034	2010-01-26 11:48	2009-12-15	Show	GitHub Exploit DB Packet Storm

255767	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4031	2010-01-26 11:47	2009-11-29	Show	GitHub Exploit DB Packet Storm

255768	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3613	2010-01-26 11:38	2009-10-19	Show	GitHub Exploit DB Packet Storm

255769	4.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の NFSv4 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3286	2010-01-26 11:38	2009-09-22	Show	GitHub Exploit DB Packet Storm

255770	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の d_delete 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2009-2908	2010-01-26 11:38	2009-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273871	6.1	MEDIUM Network	wow_new_media	wow_moodboard_lite	Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and con…	CWE-601 Open Redirect	CVE-2015-4070	2024-11-21 11:30	2017-05-17	Show	GitHub Exploit DB Packet Storm

273872	6.1	MEDIUM Network	clickfraud-monitoring phpwhois_project	adsense-click-fraud-monitoring phpwhois	Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML vi…	CWE-79 Cross-site Scripting	CVE-2015-3998	2024-11-21 11:30	2017-05-17	Show	GitHub Exploit DB Packet Storm

273873	9.8	CRITICAL Network	cloudera	key_trustee_server	Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.	CWE-320 Key Management Errors	CVE-2015-4166	2024-11-21 11:30	2017-03-24	Show	GitHub Exploit DB Packet Storm

273874	3.1	LOW Network	cloudera	navigator cloudera_manager	Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data v…	CWE-200 Information Exposure	CVE-2015-4078	2024-11-21 11:30	2017-03-24	Show	GitHub Exploit DB Packet Storm

273875	8.8	HIGH Network	qdpm	qdpm	Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) scheduler pages in qdPM 8.3 allows remote attackers to execute…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2015-3884	2024-11-21 11:30	2017-03-17	Show	GitHub Exploit DB Packet Storm

273876	5.3	MEDIUM Network	qdpm	qdpm	qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], which reveals the installation path in an error message.	CWE-200 Information Exposure	CVE-2015-3882	2024-11-21 11:30	2017-03-17	Show	GitHub Exploit DB Packet Storm

273877	7.5	HIGH Network	qdpm	qdpm	Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to (1) core/config/databases.yml, (2) core/log/qdPM_prod.log, or (3) core/apps/qd…	CWE-200 Information Exposure	CVE-2015-3881	2024-11-21 11:30	2017-03-17	Show	GitHub Exploit DB Packet Storm

273878	6.1	MEDIUM Network	qdpm	qdpm	Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) search[keywords] parameter to index.php/users page; the (2) "…	CWE-79 Cross-site Scripting	CVE-2015-3883	2024-11-21 11:30	2017-03-17	Show	GitHub Exploit DB Packet Storm

273879	7.5	HIGH Network	dell	vce_vision_intelligent_operations	The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover th…	CWE-200 Information Exposure	CVE-2015-4057	2024-11-21 11:30	2017-02-22	Show	GitHub Exploit DB Packet Storm

273880	6.7	MEDIUM Local	dell	vce_vision_intelligent_operations	The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for local users to discover credentials by leveraging administrati…	CWE-310 Cryptographic Issues	CVE-2015-4056	2024-11-21 11:30	2017-02-22	Show	GitHub Exploit DB Packet Storm