Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256391	5	警告	freedesktop.org 日本電気サイバートラスト株式会社レッドハット	-	JBIG2 デコーダにおける CairoOutputDev に関連する整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1187	2010-05-6 13:46	2009-04-23	Show	GitHub Exploit DB Packet Storm

256392	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat の custom heap management system におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1241	2010-04-30 10:26	2010-04-5	Show	GitHub Exploit DB Packet Storm

256393	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0204	2010-04-30 10:26	2010-04-13	Show	GitHub Exploit DB Packet Storm

256394	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0203	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

256395	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0202	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

256396	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0201	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

256397	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0199	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

256398	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0198	2010-04-30 10:24	2010-04-13	Show	GitHub Exploit DB Packet Storm

256399	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0197	2010-04-28 15:58	2010-04-13	Show	GitHub Exploit DB Packet Storm

256400	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0196	2010-04-28 15:57	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291681	-		chaos_tool_suite_project	ctools	The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read res…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1925	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291682	-		acquia commons_wikis_project	commons commons_wikis	The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1908	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291683	-		acquia	commons commons_group	The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1907	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291684	7.8	HIGH Local	linux redhat canonical	linux_kernel enterprise_linux enterprise_linux_eus ubuntu_linux	The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows loca…	CWE-20 Improper Input Validation	CVE-2013-1943	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

291685	-		redhat	enterprise_linux	A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest O…	CWE-362 Race Condition	CVE-2013-1935	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

291686	-		ibm apache	websphere_application_server geronimo	The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI…	CWE-94 Code Injection	CVE-2013-1777	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

291687	-		apache	openjpa	The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain cra…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1768	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

291688	-		apache redhat canonical opensuse	http_server jboss_enterprise_application_platform enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_eus u…	mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a M…	NVD-CWE-noinfo	CVE-2013-1896	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm

291689	-		apache	struts	Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) …	CWE-94 Code Injection	CVE-2013-1966	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm

291690	-		apache	struts struts2-showcase	Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled …	CWE-94 Code Injection	CVE-2013-1965	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed