Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256991	5	警告	Linear LLC S2 Security	-	Linear eMerge のマネージメントコンポーネントにおけるサービス運用妨害 (DoS)	CWE-noinfo 情報不足	CVE-2009-3734	2010-02-3 14:35	2010-01-5	Show	GitHub Exploit DB Packet Storm

256992	7.5	危険	The PHP Group LibGD project サイバートラスト株式会社レッドハット	-	PHP および GD Graphics Library の _gdGetColors 関数におけるバッファオーバーフローの脆弱性	CWE-Other その他	CVE-2009-3546	2010-02-3 14:34	2009-10-19	Show	GitHub Exploit DB Packet Storm

256993	6.8	警告	GNU Project XEmacs サイバートラスト株式会社	-	Emacs および XEmacs における .flc ファイルの処理に関する任意のコードを実行される脆弱性	CWE-DesignError	CVE-2008-2142	2010-02-2 11:43	2008-05-12	Show	GitHub Exploit DB Packet Storm

256994	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4370	2010-02-2 11:43	2009-12-16	Show	GitHub Exploit DB Packet Storm

256995	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Contact モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4369	2010-02-2 11:42	2009-12-16	Show	GitHub Exploit DB Packet Storm

256996	7.5	危険	日立	-	Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-02-2 11:42	2009-12-22	Show	GitHub Exploit DB Packet Storm

256997	4.3	警告	VMware	-	複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3731	2010-02-1 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

256998	10	危険	サイバートラスト株式会社 Linux	-	Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2008-1673	2010-02-1 11:51	2008-06-10	Show	GitHub Exploit DB Packet Storm

256999	10	危険	ヒューレット・パッカード	-	複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-3027	2010-02-1 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

257000	9.3	危険	KDE project Glyph & Cog, LLC GNOME Project サイバートラスト株式会社レッドハット	-	Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4035	2010-01-29 09:54	2009-12-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
298111	7.5	HIGH Network	xml\	\	It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read acces…	-	CVE-2012-1102	2024-11-21 10:36	2021-07-9	Show	GitHub Exploit DB Packet Storm

298112	9.8	CRITICAL Network	limit_login_attempts_project	limit_login_attempts	The Limit Login Attempts plugin before 1.7.1 for WordPress does not clear auth cookies upon a lockout, which might make it easier for remote attackers to conduct brute-force authentication attempts.	CWE-287 Improper Authentication	CVE-2012-10001	2024-11-21 10:36	2021-01-7	Show	GitHub Exploit DB Packet Storm

298113	7.4	HIGH Network	canonical	software-properties	software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under p…	CWE-295 Improper Certificate Validation	CVE-2012-0955	2024-11-21 10:36	2020-12-2	Show	GitHub Exploit DB Packet Storm

298114	5.0	MEDIUM Local	nvidia	display_driver	A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53.	CWE-362 Race Condition	CVE-2012-0953	2024-11-21 10:36	2020-05-8	Show	GitHub Exploit DB Packet Storm

298115	5.0	MEDIUM Local	nvidia	display_driver	A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.…	CWE-787 Out-of-bounds Write	CVE-2012-0952	2024-11-21 10:36	2020-05-8	Show	GitHub Exploit DB Packet Storm

298116	5.5	MEDIUM Local	systemd_project	systemd	systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).	NVD-CWE-Other	CVE-2012-1101	2024-11-21 10:36	2020-03-12	Show	GitHub Exploit DB Packet Storm

298117	5.5	MEDIUM Local	gnome debian	networkmanager debian_linux	NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.	CWE-295 Improper Certificate Validation	CVE-2012-1096	2024-11-21 10:36	2020-03-11	Show	GitHub Exploit DB Packet Storm

298118	7.5	HIGH Network	redhat	jboss_application_server	JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.	CWE-200 Information Exposure	CVE-2012-1094	2024-11-21 10:36	2020-03-11	Show	GitHub Exploit DB Packet Storm

298119	7.8	HIGH Local	debian	debian_linux x11-common	The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation.	CWE-59 Link Following	CVE-2012-1093	2024-11-21 10:36	2020-02-22	Show	GitHub Exploit DB Packet Storm

298120	7.8	HIGH Local	nvidia	display_driver	A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry.	CWE-787 Out-of-bounds Write	CVE-2012-0951	2024-11-21 10:36	2020-02-13	Show	GitHub Exploit DB Packet Storm