Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257241	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0768	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

257242	4	警告	IBM	-	IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0770	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

257243	5	警告	IBM	-	IBM WebSphere Application Server (WAS) の Administrative Console コンポーネントにおける WAS セッションの内容を読まれる脆弱性	CWE-200 情報漏えい	CVE-2009-1898	2010-05-27 17:24	2009-06-3	Show	GitHub Exploit DB Packet Storm

257244	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live 2009 および teTeX の dvipsk/dospecial.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1440	2010-05-26 16:33	2010-05-6	Show	GitHub Exploit DB Packet Storm

257245	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live および teTeX の predospecial 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0739	2010-05-26 16:32	2010-04-16	Show	GitHub Exploit DB Packet Storm

257246	9.3	危険	アドビシステムズ	-	Adobe Photoshop CS4 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1279	2010-05-26 16:32	2010-04-30	Show	GitHub Exploit DB Packet Storm

257247	9.3	危険	レッドハット freedesktop.org サイバートラスト株式会社 Glyph & Cog, LLC	-	Xpdf および Poppler の ObjectStream::ObjectStream 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3608	2010-05-26 16:31	2009-10-15	Show	GitHub Exploit DB Packet Storm

257248	6.8	警告	サイバートラスト株式会社レッドハット CUPS	-	CUPS の pdftops フィルタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0791	2010-05-26 16:30	2009-06-3	Show	GitHub Exploit DB Packet Storm

257249	6.8	警告	レッドハット Glyph & Cog, LLC サイバートラスト株式会社 CUPS	-	Xpdf および CUPS におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0195	2010-05-26 16:30	2009-04-16	Show	GitHub Exploit DB Packet Storm

257250	4.3	警告	Glyph & Cog, LLC freedesktop.org 日本電気サイバートラスト株式会社 CUPS レッドハット	-	JBIG2 MMR デコーダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1183	2010-05-26 16:30	2009-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
278341	-	oracle	javafx jre jdk	Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-491…	NVD-CWE-noinfo	CVE-2015-4908	2024-11-21 11:32	2015-10-22	Show	GitHub Exploit DB Packet Storm

278342	-	linux	linux_kernel	The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-5283	2024-11-21 11:32	2015-10-19	Show	GitHub Exploit DB Packet Storm

278343	-	linux	linux_kernel	The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a d…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-5156	2024-11-21 11:32	2015-10-19	Show	GitHub Exploit DB Packet Storm

278344	-	ibm	vios aix	netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-4948	2024-11-21 11:32	2015-10-16	Show	GitHub Exploit DB Packet Storm

278345	-	ibm	license_metric_tool	IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote authenticated users to bypass intended access restrictions and obtain sensitive i…	CWE-200 Information Exposure	CVE-2015-4929	2024-11-21 11:32	2015-10-11	Show	GitHub Exploit DB Packet Storm

278346	-	fedoraproject redhat opensuse	fedora enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_hpc_node opensuse icedtea	IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving …	CWE-20 Improper Input Validation	CVE-2015-5235	2024-11-21 11:32	2015-10-9	Show	GitHub Exploit DB Packet Storm

278347	-	redhat opensuse fedoraproject	enterprise_linux_hpc_node enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation opensuse icedtea fedora	IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass use…	CWE-20 Improper Input Validation	CVE-2015-5234	2024-11-21 11:32	2015-10-9	Show	GitHub Exploit DB Packet Storm

278348	-	ibm	emptoris_sourcing	IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticat…	CWE-200 Information Exposure	CVE-2015-5024	2024-11-21 11:32	2015-10-6	Show	GitHub Exploit DB Packet Storm

278349	-	ibm	b2b_advanced_communications	IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2, when access by guests is enabled, place an internal hostname and a p…	CWE-200 Information Exposure	CVE-2015-5022	2024-11-21 11:32	2015-10-6	Show	GitHub Exploit DB Packet Storm

278350	-	ibm	sterling_b2b_integrator	IBM Sterling B2B Integrator 5.2 before 5020500_8 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2015-4992	2024-11-21 11:32	2015-10-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed