Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256591	4.3	警告	サイバートラスト株式会社レッドハット	-	Red Hat および MIRACLE LINUX の sendmail におけるメール送信元を偽装される脆弱性	-	CVE-2006-7176	2010-04-27 15:18	2007-03-27	Show	GitHub Exploit DB Packet Storm

256592	6.9	警告	アップル	-	Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0532	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256593	4.3	警告	アップル	-	Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0531	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256594	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0536	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256595	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0529	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256596	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0528	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256597	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256598	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

256599	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

256600	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
280161	7.5	HIGH Network	aircrack-ng	aircrack-ng	buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.	CWE-20 Improper Input Validation	CVE-2014-8323	2024-11-21 11:18	2017-10-17	Show	GitHub Exploit DB Packet Storm

280162	6.1	MEDIUM Network	post_highlights_projects	post_highlights	Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline ac…	CWE-79 Cross-site Scripting	CVE-2014-8087	2024-11-21 11:18	2017-10-17	Show	GitHub Exploit DB Packet Storm

280163	7.5	HIGH Network	ovirt redhat	ovirt ovirt-engine	oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that us…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-7851	2024-11-21 11:18	2017-10-17	Show	GitHub Exploit DB Packet Storm

280164	8.8	HIGH Network	ovirt	ovirt-node	ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat Enterprise Virtualization 3 do not properly quote input strings, …	CWE-134 Use of Externally-Controlled Format String	CVE-2014-8170	2024-11-21 11:18	2017-09-26	Show	GitHub Exploit DB Packet Storm

280165	7.8	HIGH Local	fso-frameworkd_project fso-gsmd_project fso-usaged_project phonefsod_project	fso-frameworkd fso-gsmd fso-usaged phonefsod	The D-Bus security policy files in /etc/dbus-1/system.d/*.conf in fso-gsmd 0.12.0-3, fso-frameworkd 0.9.5.9+git20110512-4, and fso-usaged 0.12.0-2 as packaged in Debian, the upstream cornucopia.git (…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-8156	2024-11-21 11:18	2017-09-26	Show	GitHub Exploit DB Packet Storm

280166	9.8	CRITICAL Network	redhat	edeploy	eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.	CWE-200 Information Exposure	CVE-2014-8174	2024-11-21 11:18	2017-09-20	Show	GitHub Exploit DB Packet Storm

280167	7.5	HIGH Network	apache	wicket	Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptographic protection mechanism and predict encrypted URLs by leveraging use of Cry…	CWE-310 Cryptographic Issues	CVE-2014-7808	2024-11-21 11:18	2017-09-16	Show	GitHub Exploit DB Packet Storm

280168	6.5	MEDIUM Network	redhat	satellite	Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.	CWE-22 Path Traversal	CVE-2014-8163	2024-11-21 11:18	2017-08-29	Show	GitHub Exploit DB Packet Storm

280169	6.1	MEDIUM Local	redhat	satellite	Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.	CWE-284 Improper Access Control	CVE-2014-8168	2024-11-21 11:18	2017-08-29	Show	GitHub Exploit DB Packet Storm

280170	5.3	MEDIUM Network	d-link	dns-327l_firmware dns-320l_firmware	The web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate requests, which allows remote attackers to obtain arbitrary photos…	CWE-287 CWE-200 Improper Authentication Information Exposure	CVE-2014-7860	2024-11-21 11:18	2017-08-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed