Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257631 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0662 2011-05-6 11:06 2011-04-12 Show GitHub Exploit DB Packet Storm
257632 9.3 危険 マイクロソフト - Microsoft Windows のワードパッドにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0028 2011-05-6 11:03 2011-04-12 Show GitHub Exploit DB Packet Storm
257633 7.6 危険 マイクロソフト - Microsoft Windows の FAX 送付状エディター内にある fxscover.exe における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3974 2011-05-6 11:01 2011-04-12 Show GitHub Exploit DB Packet Storm
257634 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0977 2011-05-6 11:00 2011-02-10 Show GitHub Exploit DB Packet Storm
257635 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0107 2011-05-6 10:59 2011-04-12 Show GitHub Exploit DB Packet Storm
257636 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0976 2011-05-6 10:58 2011-02-10 Show GitHub Exploit DB Packet Storm
257637 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0656 2011-05-6 10:57 2011-04-12 Show GitHub Exploit DB Packet Storm
257638 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0655 2011-05-6 10:56 2011-04-12 Show GitHub Exploit DB Packet Storm
257639 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0980 2011-05-6 10:55 2011-02-10 Show GitHub Exploit DB Packet Storm
257640 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0104 2011-05-6 10:54 2011-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284171 - nvidia gpu_driver_r304
gpu_driver_r346
gpu_driver_r340
gpu_driver_r343 		The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel adm… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-1170 2024-11-21 11:24 2015-03-7 Show GitHub Exploit DB Packet Storm
284172 - sharelatex sharelatex Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename. CWE-77
Command Injection 		CVE-2015-0934 2024-11-21 11:24 2015-03-4 Show GitHub Exploit DB Packet Storm
284173 - sharelatex sharelatex Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to read arbitrary files via a \include comman… CWE-22
Path Traversal 		CVE-2015-0933 2024-11-21 11:24 2015-03-4 Show GitHub Exploit DB Packet Storm
284174 - network_vision intravue Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command  		CVE-2015-0977 2024-11-21 11:24 2015-02-27 Show GitHub Exploit DB Packet Storm
284175 - gnu cpio cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. NVD-CWE-Other
CVE-2015-1197 2024-11-21 11:24 2015-02-20 Show GitHub Exploit DB Packet Storm
284176 - ektron ektron_content_management_system Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a crafted XSLT document,… CWE-74
Injection 		CVE-2015-0931 2024-11-21 11:24 2015-02-14 Show GitHub Exploit DB Packet Storm
284177 - ektron ektron_content_management_system The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via a… NVD-CWE-Other
CVE-2015-0923 2024-11-21 11:24 2015-02-14 Show GitHub Exploit DB Packet Storm
284178 - holding_pattern_project holding_pattern Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code … NVD-CWE-Other
CVE-2015-1172 2024-11-21 11:24 2015-02-12 Show GitHub Exploit DB Packet Storm
284179 - apereo central_authentication_service Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a wildcard and a valid passw… CWE-74
Injection 		CVE-2015-1169 2024-11-21 11:24 2015-02-11 Show GitHub Exploit DB Packet Storm
284180 - mantisbt mantisbt The string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing at… NVD-CWE-Other
CVE-2015-1042 2024-11-21 11:24 2015-02-11 Show GitHub Exploit DB Packet Storm