Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256851	6.8	警告	マイクロソフト	-	Microsoft Windows の LSASS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3675	2010-01-22 10:27	2009-12-8	Show	GitHub Exploit DB Packet Storm

256852	9.3	危険	マイクロソフト	-	Microsoft Project における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-0102	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

256853	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-94 コード・インジェクション	CVE-2009-3673	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

256854	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3671	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

256855	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性	CWE-255 CWE-94	CVE-2009-3677	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

256856	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2505	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

256857	6.9	警告	acpid	-	acpid の umask におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4235	2010-01-21 11:44	2009-12-7	Show	GitHub Exploit DB Packet Storm

256858	6.9	警告	サイバートラスト株式会社レッドハット acpid	-	acpid のレッドハットパッチにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4033	2010-01-21 11:43	2009-12-7	Show	GitHub Exploit DB Packet Storm

256859	10	危険	アドビシステムズ	-	Adobe Illustrator における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3952	2010-01-21 11:43	2010-01-7	Show	GitHub Exploit DB Packet Storm

256860	9.3	危険	アドビシステムズ	-	Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4195	2010-01-21 11:43	2009-12-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
272551	7.5	HIGH Network	proxygen_project	proxygen	The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value.	CWE-284 Improper Access Control	CVE-2015-7263	2024-11-21 11:36	2017-04-10	Show	GitHub Exploit DB Packet Storm

272552	7.8	HIGH Local	vertiv	liebert_multilink_automated_shutdown	Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-7260	2024-11-21 11:36	2017-04-10	Show	GitHub Exploit DB Packet Storm

272553	5.5	MEDIUM Local	libtiff	libtiff	LibTIFF allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file.	CWE-399 Resource Management Errors	CVE-2015-7313	2024-11-21 11:36	2017-03-17	Show	GitHub Exploit DB Packet Storm

272554	2.8	LOW Local	ibm	cloud_orchestrator smartcloud_orchestrator	A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API …	CWE-284 Improper Access Control	CVE-2015-7494	2024-11-21 11:36	2017-02-9	Show	GitHub Exploit DB Packet Storm

272555	4.7	MEDIUM Local	ibm	infosphere_information_server	IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information.	CWE-200 Information Exposure	CVE-2015-7493	2024-11-21 11:36	2017-02-9	Show	GitHub Exploit DB Packet Storm

272556	4.4	MEDIUM Local	ibm	websphere_extreme_scale	IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator pri…	CWE-200 Information Exposure	CVE-2015-7418	2024-11-21 11:36	2017-02-9	Show	GitHub Exploit DB Packet Storm

272557	6.6	MEDIUM Network	puppetlabs	mcollective-puppet-agent	The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument.	CWE-254 7PK - Security Features	CVE-2015-7331	2024-11-21 11:36	2017-01-31	Show	GitHub Exploit DB Packet Storm

272558	5.4	MEDIUM Network	fortinet	fortimanager_firmware fortianalyzer_firmware	Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models with a hard disk, and FortiAnalyzer 5.x be…	CWE-79 Cross-site Scripting	CVE-2015-7363	2024-11-21 11:36	2016-10-7	Show	GitHub Exploit DB Packet Storm

272559	9.8	CRITICAL Network	apple	airport_base_station_firmware	Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7029	2024-11-21 11:36	2016-07-3	Show	GitHub Exploit DB Packet Storm

272560	2.5	LOW Local	ibm	websphere_mq	runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging authority for +connect and +dsp.	CWE-284 Improper Access Control	CVE-2015-7473	2024-11-21 11:36	2016-06-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed