Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256131	6.9	警告	アップルターボリナックス CUPS	-	CUPS の _cupsGetlang 関数における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0393	2010-04-13 15:17	2010-03-29	Show	GitHub Exploit DB Packet Storm

256132	6.8	警告	アップル	-	Apple Mac OS X の CoreTypes における任意の JavaScript を実行される脆弱性	CWE-Other その他	CVE-2010-0063	2010-04-13 15:17	2010-03-29	Show	GitHub Exploit DB Packet Storm

256133	6.8	警告	アップル	-	Apple Mac OS X の CoreMedia および QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0062	2010-04-13 15:17	2010-03-29	Show	GitHub Exploit DB Packet Storm

256134	6.8	警告	アップル	-	Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0060	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

256135	6.8	警告	アップル	-	Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0059	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

256136	6.4	警告	アップル	-	Apple Mac OS X の ClamAV におけるシステムにウィルスを取り込む脆弱性	CWE-16 環境設定	CVE-2010-0058	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

256137	7.5	危険	アップル	-	Apple Mac OS X の AFP サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0533	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

256138	7.5	危険	アップル	-	Apple Mac OS X の AFP サーバにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0057	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

256139	6.4	警告	アップル	-	Apple Mac OS X のアプリケーションファイアウォールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2801	2010-04-13 15:15	2010-03-29	Show	GitHub Exploit DB Packet Storm

256140	6.8	警告	アップル	-	Apple Mac OS X の Cocoa のスペルチェック機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0056	2010-04-13 15:15	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
282581	-	bitdefender	gravityzone	Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the id parameter to webservice/CORE/…	CWE-22 Path Traversal	CVE-2014-5350	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

282582	-	baidu	spark_browser	Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print JavaScript function.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-5349	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

282583	-	riverbed	steelapp_traffic_manager	Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject ar…	CWE-79 Cross-site Scripting	CVE-2014-5348	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

282584	-	disqus	disqus_comment_system	Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requ…	CWE-352 Origin Validation Error	CVE-2014-5347	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

282585	-	disqus	disqus_comment_system	Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests th…	CWE-352 Origin Validation Error	CVE-2014-5346	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

282586	-	disqus	disqus_comment_system	Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step param…	CWE-79 Cross-site Scripting	CVE-2014-5345	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

282587	-	mobiloud	mobiloud	Multiple cross-site scripting (XSS) vulnerabilities in the Mobiloud (mobiloud-mobile-app-plugin) plugin before 2.3.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via un…	CWE-79 Cross-site Scripting	CVE-2014-5344	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

282588	-	fengoffice	feng_office	Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field.	CWE-79 Cross-site Scripting	CVE-2014-5343	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

282589	-	debian canonical kde	kde4libs ubuntu_linux kdelibs kauth	KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a Pol…	CWE-362 Race Condition	CVE-2014-5033	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

282590	-	adobe	adobe_air flash_player adobe_air_sdk	Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android,…	CWE-352 Origin Validation Error	CVE-2014-5333	2024-11-21 11:11	2014-08-19	Show	GitHub Exploit DB Packet Storm