Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257951 4.3 警告 ISC, Inc.
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
レッドハット		 - BIND 9 の DNSSEC 検証コードに脆弱性 CWE-Other
その他 		CVE-2010-0097 2010-05-19 17:42 2010-01-20 Show GitHub Exploit DB Packet Storm
257952 9.3 危険 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の erf ファイル処理に脆弱性 CWE-189
数値処理の問題 		CVE-2009-3829 2010-05-19 17:42 2009-10-7 Show GitHub Exploit DB Packet Storm
257953 10 危険 アップル - Apple Mac OS X 上で稼働する Safari における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1120 2010-05-18 16:39 2010-03-25 Show GitHub Exploit DB Packet Storm
257954 6.9 警告 KDE project
サイバートラスト株式会社
レッドハット		 - KDE の KDM における制御ソケットの処理に関する権限昇格の脆弱性 CWE-362
競合状態 		CVE-2010-0436 2010-05-18 16:39 2010-04-13 Show GitHub Exploit DB Packet Storm
257955 1.9 注意 レッドハット - Free Software Foundation Berkeley DB の NSS モジュールにおける情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2010-0826 2010-05-18 16:38 2010-04-5 Show GitHub Exploit DB Packet Storm
257956 7.8 危険 日本電気 - CapsSuite Small Edition PatchMeister におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-1943 2010-05-17 12:03 2010-05-17 Show GitHub Exploit DB Packet Storm
257957 7.8 危険 日本電気 - WebSAM DeploymentManager におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-1941 2010-05-17 12:02 2010-05-17 Show GitHub Exploit DB Packet Storm
257958 6.4 警告 富士通 - Interstage Application Server におけるリクエスト処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-1942 2010-05-17 12:01 2010-05-17 Show GitHub Exploit DB Packet Storm
257959 2.1 注意 オラクル - Oracle Sun Product Suite の Sun Cluster コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0884 2010-05-14 18:43 2010-04-13 Show GitHub Exploit DB Packet Storm
257960 2.1 注意 オラクル - Oracle Sun Product Suite の Sun Cluster コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0883 2010-05-14 18:43 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283421 6.1 MEDIUM
Network 		fork-cms fork_cms Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork CMS before 3.8.4 allows remote attackers to inject arbitrary web script or HTML … CWE-79
Cross-site Scripting 		CVE-2014-9470 2024-11-21 11:20 2020-02-9 Show GitHub Exploit DB Packet Storm
283422 6.5 MEDIUM
Network 		open-school open-school Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to obtain sensitive information via the r parameter with the v… CWE-200
Information Exposure 		CVE-2014-9127 2024-11-21 11:20 2020-02-9 Show GitHub Exploit DB Packet Storm
283423 6.1 MEDIUM
Network 		open-school open-school Multiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web script or HTML via the YII_CSRF_TOKEN HTTP cookie or the Studen… CWE-79
Cross-site Scripting 		CVE-2014-9126 2024-11-21 11:20 2020-02-9 Show GitHub Exploit DB Packet Storm
283424 5.9 MEDIUM
Network 		mediawiki mediawiki The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML. CWE-200
Information Exposure 		CVE-2014-9481 2024-11-21 11:20 2020-01-28 Show GitHub Exploit DB Packet Storm
283425 6.1 MEDIUM
Network 		clickdesk clickdesk ClickDesk version 4.3 and below has persistent cross site scripting CWE-79
Cross-site Scripting 		CVE-2014-9211 2024-11-21 11:20 2020-01-14 Show GitHub Exploit DB Packet Storm
283426 6.5 MEDIUM
Network 		free freebox_os Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation CWE-352
 Origin Validation Error 		CVE-2014-9382 2024-11-21 11:20 2020-01-13 Show GitHub Exploit DB Packet Storm
283427 5.4 MEDIUM
Network 		free freebox_os A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary cod… CWE-79
Cross-site Scripting 		CVE-2014-9405 2024-11-21 11:20 2020-01-7 Show GitHub Exploit DB Packet Storm
283428 8.6 HIGH
Network 		docker docker Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or… CWE-22
Path Traversal 		CVE-2014-9356 2024-11-21 11:20 2019-12-3 Show GitHub Exploit DB Packet Storm
283429 4.3 MEDIUM
Network 		wpmarketplace_project wpmarketplace Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitra… CWE-22
Path Traversal 		CVE-2014-9014 2024-11-21 11:20 2019-11-7 Show GitHub Exploit DB Packet Storm
283430 8.8 HIGH
Network 		wpmarketplace_project wpmarketplace The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a reque… CWE-20
 Improper Input Validation  		CVE-2014-9013 2024-11-21 11:20 2019-11-7 Show GitHub Exploit DB Packet Storm