Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257531	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0246	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

257532	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0245	2010-02-22 12:13	2010-01-21	Show	GitHub Exploit DB Packet Storm

257533	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性	CWE-DesignError	CVE-2009-4074	2010-02-22 12:13	2009-11-25	Show	GitHub Exploit DB Packet Storm

257534	6.6	警告	マイクロソフト	-	Microsoft Windows の kernel における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0232	2010-02-22 12:12	2010-01-20	Show	GitHub Exploit DB Packet Storm

257535	10	危険	Rockwell Automation	-	Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性	CWE-noinfo 情報不足	CVE-2009-3739	2010-02-19 14:22	2010-01-21	Show	GitHub Exploit DB Packet Storm

257536	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer において任意のコードが実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0249	2010-02-19 14:21	2010-01-15	Show	GitHub Exploit DB Packet Storm

257537	7.5	危険	アップル MySQL AB	-	MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2008-0227	2010-02-19 11:37	2008-01-10	Show	GitHub Exploit DB Packet Storm

257538	7.5	危険	アップル MySQL AB	-	MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0226	2010-02-19 11:32	2008-01-10	Show	GitHub Exploit DB Packet Storm

257539	7.5	危険	Linux レッドハット	-	Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性	-	CVE-2006-6304	2010-02-18 14:28	2006-12-14	Show	GitHub Exploit DB Packet Storm

257540	7.8	危険	Linux レッドハット	-	Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4272	2010-02-18 14:28	2010-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
280401	7.5	HIGH Network	gnu debian	patch debian_linux	A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an in…	CWE-22 Path Traversal	CVE-2015-1396	2024-11-21 11:25	2019-11-26	Show	GitHub Exploit DB Packet Storm

280402	5.5	MEDIUM Local	gnupg canonical	gnupg ubuntu_linux	kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service (inval…	CWE-20 Improper Input Validation	CVE-2015-1607	2024-11-21 11:25	2019-11-21	Show	GitHub Exploit DB Packet Storm

280403	5.5	MEDIUM Local	gnupg debian	gnupg debian_linux	The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service (invalid read and use-after-free) via a crafted keyring file.	CWE-416 Use After Free	CVE-2015-1606	2024-11-21 11:25	2019-11-21	Show	GitHub Exploit DB Packet Storm

280404	5.3	MEDIUM Network	canonical	ubuntu_linux	All versions of unity-scope-gdrive logs search terms to syslog.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2015-1343	2024-11-21 11:25	2019-04-23	Show	GitHub Exploit DB Packet Storm

280405	7.8	HIGH Local	canonical	ubuntu_linux apport	Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-1341	2024-11-21 11:25	2019-04-23	Show	GitHub Exploit DB Packet Storm

280406	8.1	HIGH Network	linuxcontainers	lxd	LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause a…	CWE-362 Race Condition	CVE-2015-1340	2024-11-21 11:25	2019-04-23	Show	GitHub Exploit DB Packet Storm

280407	7.8	HIGH Local	canonical	ubuntu_linux	Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transf…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-1327	2024-11-21 11:25	2019-04-23	Show	GitHub Exploit DB Packet Storm

280408	8.8	HIGH Network	python-dbusmock_project	python-dbusmock	python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.	CWE-20 Improper Input Validation	CVE-2015-1326	2024-11-21 11:25	2019-04-23	Show	GitHub Exploit DB Packet Storm

280409	9.8	CRITICAL Network	canonical	metal_as_a_service	The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2.	CWE-255 Credentials Management	CVE-2015-1320	2024-11-21 11:25	2019-04-23	Show	GitHub Exploit DB Packet Storm

280410	7.5	HIGH Network	canonical	juju	Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.	CWE-320 Key Management Errors	CVE-2015-1316	2024-11-21 11:25	2019-04-23	Show	GitHub Exploit DB Packet Storm