Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 25, 2026, 2:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 255931 | 3.3 | 注意 | レッドハット | - | Firefox の SPICE プラグインにおける重要な情報を取得される脆弱性 |
CWE-362
競合状態 |
CVE-2010-2792 | 2010-09-15 17:13 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 255932 | 1.9 | 注意 | シトリックス・システムズ | - | Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-DesignError
|
CVE-2010-2619 | 2010-09-14 15:55 | 2010-06-17 | Show | GitHub Exploit DB Packet Storm |
| 255933 | 4.6 | 警告 | シトリックス・システムズ | - | Citrix XenServer における認証を回避され Xen API (XAPI) を実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0633 | 2010-09-14 15:54 | 2010-02-12 | Show | GitHub Exploit DB Packet Storm |
| 255934 | 4.3 | 警告 | シトリックス・システムズ | - | 複数の Citrix XenServer 製品の XenAPI HTTP インターフェイスにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3253 | 2010-09-14 15:54 | 2008-07-16 | Show | GitHub Exploit DB Packet Storm |
| 255935 | 7.5 | 危険 | シトリックス・システムズ | - | Citrix XenCenterWeb の XenServer Resource Kit における PHP コードを挿入される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3760 | 2010-09-14 15:54 | 2009-10-22 | Show | GitHub Exploit DB Packet Storm |
| 255936 | 6 | 警告 | シトリックス・システムズ | - | Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-3759 | 2010-09-14 15:54 | 2009-10-22 | Show | GitHub Exploit DB Packet Storm |
| 255937 | 7.5 | 危険 | シトリックス・システムズ | - | Citrix XenCenterWeb の XenServer Resource Kit における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3758 | 2010-09-14 15:53 | 2009-10-22 | Show | GitHub Exploit DB Packet Storm |
| 255938 | 4.3 | 警告 | シトリックス・システムズ | - | Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3757 | 2010-09-14 15:53 | 2009-10-22 | Show | GitHub Exploit DB Packet Storm |
| 255939 | 7.2 | 危険 | シトリックス・システムズ | - | Xen の xend におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-5716 | 2010-09-14 15:53 | 2008-12-24 | Show | GitHub Exploit DB Packet Storm |
| 255940 | 6 | 警告 | VMware | - | VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-2667 | 2010-09-13 16:05 | 2010-07-13 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 25, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 279201 | - | openstack | image_registry_and_delivery_service_\(glance\) | OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption)… |
CWE-399
Resource Management Errors |
CVE-2014-9684 | 2024-11-21 11:21 | 2015-02-25 | Show | GitHub Exploit DB Packet Storm | |
| 279202 | - | apple | cups | Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which trigger… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2014-9679 | 2024-11-21 11:21 | 2015-02-20 | Show | GitHub Exploit DB Packet Storm | |
| 279203 | - |
samba opensuse oracle |
rsync opensuse solaris |
rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path. |
CWE-59
Link Following |
CVE-2014-9512 | 2024-11-21 11:21 | 2015-02-13 | Show | GitHub Exploit DB Packet Storm | |
| 279204 | - |
canonical freetype debian fedoraproject redhat opensuse |
ubuntu_linux freetype debian_linux fedora enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node
bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the AS…
|
CWE-264
|
Permissions, Privileges, and Access Controls
CVE-2014-9675
|
2024-11-21 11:21 |
2015-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
| |
| 279205 | - |
canonical debian redhat opensuse freetype |
ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_hpc… |
Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2014-9673 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 279206 | - |
oracle debian canonical freetype opensuse |
solaris debian_linux ubuntu_linux freetype opensuse |
Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from pr… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2014-9672 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 279207 | - |
redhat debian canonical oracle opensuse freetype |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_hpc_node_eus debian_linux ubu… |
Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via… |
NVD-CWE-Other
|
CVE-2014-9671 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 279208 | - |
canonical freetype redhat oracle opensuse debian fedoraproject |
ubuntu_linux freetype enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_hpc_nod… |
Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other i… |
CWE-125
Out-of-bounds Read |
CVE-2014-9669 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 279209 | - |
canonical oracle fedoraproject redhat opensuse freetype |
ubuntu_linux solaris fedora enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node enterprise_linu… |
The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a de… |
NVD-CWE-Other
|
CVE-2014-9674 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 279210 | - |
debian opensuse fedoraproject oracle redhat canonical freetype |
debian_linux opensuse fedora solaris enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node ent… |
Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dere… |
CWE-189
Numeric Errors |
CVE-2014-9670 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm |