Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255871 6.8 警告 マイクロソフト - Microsoft Windows のカーネルにおける権限を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2010-1889 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
255872 6.8 警告 マイクロソフト - Microsoft Windows XP のカーネルにおける権限を取得される脆弱性 CWE-362
競合状態
CVE-2010-1888 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
255873 9.3 危険 マイクロソフト - Microsoft Silverlight における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0019 2010-09-1 15:15 2010-08-10 Show GitHub Exploit DB Packet Storm
255874 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox の layout/generic/nsObjectFrame.cpp における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-2755 2010-09-1 14:54 2010-07-20 Show GitHub Exploit DB Packet Storm
255875 9.3 危険 アドビシステムズ
レッドハット
- Adobe Reader および Acrobat における任意のローカルプログラムを実行させられる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1240 2010-09-1 14:52 2010-04-5 Show GitHub Exploit DB Packet Storm
255876 9.3 危険 マイクロソフト - Microsoft Windows の Secure Channel における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-2566 2010-08-31 16:46 2010-08-10 Show GitHub Exploit DB Packet Storm
255877 9.3 危険 マイクロソフト - Microsoft XML Core Services における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-2561 2010-08-31 16:45 2010-08-10 Show GitHub Exploit DB Packet Storm
255878 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-2560 2010-08-31 16:45 2010-08-10 Show GitHub Exploit DB Packet Storm
255879 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-2559 2010-08-31 16:45 2010-08-10 Show GitHub Exploit DB Packet Storm
255880 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-362
競合状態
CVE-2010-2558 2010-08-31 16:45 2010-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280011 - mantisbt mantisbt SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL commands via the proje… CWE-89
SQL Injection
CVE-2014-8554 2024-11-21 11:19 2014-11-14 Show GitHub Exploit DB Packet Storm
280012 - freebsd freebsd The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users to obtain sensitive information from kernel memory via a ca… CWE-200
Information Exposure
CVE-2014-8476 2024-11-21 11:19 2014-11-14 Show GitHub Exploit DB Packet Storm
280013 - open_atrium_project open_atrium The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that have been removed from a node by leveraging a previous revi… CWE-200
Information Exposure
CVE-2014-8736 2024-11-21 11:19 2014-11-13 Show GitHub Exploit DB Packet Storm
280014 - bad_behavior_project bad_behavior The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" per… CWE-200
Information Exposure
CVE-2014-8735 2024-11-21 11:19 2014-11-13 Show GitHub Exploit DB Packet Storm
280015 - drupal organic_groups_menu The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pages" permission to change module settings via unspecified ve… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-8734 2024-11-21 11:19 2014-11-13 Show GitHub Exploit DB Packet Storm
280016 - progress openedge Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the selection parameter. CWE-22
Path Traversal
CVE-2014-8555 2024-11-21 11:19 2014-11-13 Show GitHub Exploit DB Packet Storm
280017 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe … CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-8442 2024-11-21 11:19 2014-11-12 Show GitHub Exploit DB Packet Storm
280018 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe … NVD-CWE-noinfo
CVE-2014-8441 2024-11-21 11:19 2014-11-12 Show GitHub Exploit DB Packet Storm
280019 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe … NVD-CWE-noinfo
CVE-2014-8440 2024-11-21 11:19 2014-11-12 Show GitHub Exploit DB Packet Storm
280020 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR S… NVD-CWE-Other
CVE-2014-8438 2024-11-21 11:19 2014-11-12 Show GitHub Exploit DB Packet Storm