Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257121	4.3	警告	アップル	-	Apple Mac OS X のヘルプビューアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1373	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

257122	3.3	注意	アップル	-	Apple Mac OS X の Folder Manager における任意のフォルダを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0546	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

257123	4.4	警告	アップル	-	Apple Mac OS X の DesktopServices におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0545	2010-07-8 18:26	2010-06-15	Show	GitHub Exploit DB Packet Storm

257124	10	危険	ヒューレット・パッカード SGI IBM	-	rpc.pcnfsd の _msgout 関数における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1039	2010-07-8 18:03	2010-05-18	Show	GitHub Exploit DB Packet Storm

257125	1.2	注意	IBM OpenBSD	-	OpenSSH における X11 転送ポートをハイジャックされる脆弱性	CWE-200 情報漏えい	CVE-2008-3259	2010-07-7 16:40	2008-07-22	Show	GitHub Exploit DB Packet Storm

257126	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるユーザインターフェースを偽装される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1581	2010-07-6 19:19	2009-05-12	Show	GitHub Exploit DB Packet Storm

257127	6.8	警告	アップル SquirrelMail Project	-	SquirrelMail におけるセッション固定の脆弱性	CWE-287 不適切な認証	CVE-2009-1580	2010-07-6 19:18	2009-05-11	Show	GitHub Exploit DB Packet Storm

257128	6.8	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-1579	2010-07-6 19:18	2009-05-10	Show	GitHub Exploit DB Packet Storm

257129	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1578	2010-07-6 19:18	2009-05-8	Show	GitHub Exploit DB Packet Storm

257130	8.5	危険	マイクロソフト	-	Microsoft IIS における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1256	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274621	7.8	HIGH Local	linux	linux_kernel	arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted (1) F_OFD_GETLK, (2) F_OFD_SETLK, or (3) F_OFD_SETLKW command in an fcntl64 system…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-8966	2024-11-21 11:39	2016-12-9	Show	GitHub Exploit DB Packet Storm

274622	7.4	HIGH Network	libtiff	libtiff	Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process …	CWE-20 CWE-190 Improper Input Validation Integer Overflow or Wraparound	CVE-2015-8870	2024-11-21 11:39	2016-12-7	Show	GitHub Exploit DB Packet Storm

274623	5.5	MEDIUM Local	linux	linux_kernel	crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local u…	CWE-476 NULL Pointer Dereference	CVE-2015-8970	2024-11-21 11:39	2016-11-28	Show	GitHub Exploit DB Packet Storm

274624	7.5	HIGH Network	soap\	\	In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with th…	CWE-399 Resource Management Errors	CVE-2015-8978	2024-11-21 11:39	2016-11-23	Show	GitHub Exploit DB Packet Storm

274625	5.5	MEDIUM Local	linux	linux_kernel	The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel memory by reading a tty data structure.	CWE-200 Information Exposure	CVE-2015-8964	2024-11-21 11:39	2016-11-16	Show	GitHub Exploit DB Packet Storm

274626	7.0	HIGH Local	linux	linux_kernel	Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect handling of an sweven…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2015-8963	2024-11-21 11:39	2016-11-16	Show	GitHub Exploit DB Packet Storm

274627	7.3	HIGH Local	linux	linux_kernel	Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and…	CWE-415 Double Free	CVE-2015-8962	2024-11-21 11:39	2016-11-16	Show	GitHub Exploit DB Packet Storm

274628	7.8	HIGH Local	linux	linux_kernel	The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper acc…	CWE-416 Use After Free	CVE-2015-8961	2024-11-21 11:39	2016-11-16	Show	GitHub Exploit DB Packet Storm

274629	9.8	CRITICAL Network	squareup	git-fastclone	git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to "cd " and "g…	CWE-77 Command Injection	CVE-2015-8969	2024-11-21 11:39	2016-11-3	Show	GitHub Exploit DB Packet Storm

274630	8.8	HIGH Network	squareup	git-fastclone	git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a clien…	CWE-77 Command Injection	CVE-2015-8968	2024-11-21 11:39	2016-11-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed