Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 4:12 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257991	6.8	警告	IBM	-	IBM AIX および VIOS の sa_snap におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3405	2010-10-5 18:56	2010-08-6	Show	GitHub Exploit DB Packet Storm

257992	4.3	警告	有限会社のれんずプロ	-	AD-EDIT2 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2367	2010-10-5 11:02	2010-10-5	Show	GitHub Exploit DB Packet Storm

257993	9.3	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の ImageIO におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1817	2010-10-4 17:59	2010-09-8	Show	GitHub Exploit DB Packet Storm

257994	5.8	警告	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の FaceTime における通話をリダイレクトされる脆弱性	CWE-Other その他	CVE-2010-1810	2010-10-4 17:55	2010-09-8	Show	GitHub Exploit DB Packet Storm

257995	10	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の Accessibility コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-1809	2010-10-4 17:55	2010-09-8	Show	GitHub Exploit DB Packet Storm

257996	4	警告	ISC, Inc. IBM サイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	BIND 9 の DNSSEC 検証処理における脆弱性	CWE-noinfo 情報不足	CVE-2009-4022	2010-10-1 17:39	2009-12-2	Show	GitHub Exploit DB Packet Storm

257997	4	警告	ISC, Inc. サイバートラスト株式会社ターボリナックスヒューレット・パッカードレッドハット	-	ISC BIND における DNS キャッシュ汚染の脆弱性	CWE-noinfo 情報不足	CVE-2010-0290	2010-10-1 17:39	2010-01-22	Show	GitHub Exploit DB Packet Storm

257998	7.6	危険	ISC, Inc. ヒューレット・パッカード	-	ISC BIND における処理範囲外のデータ処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-0382	2010-10-1 17:38	2010-01-22	Show	GitHub Exploit DB Packet Storm

257999	9	危険	日立	-	Groupmax Scheduler Server における複数の脆弱性	CWE-noinfo 情報不足	-	2010-10-1 17:37	2010-09-6	Show	GitHub Exploit DB Packet Storm

258000	5.8	警告	富士通アクセラテクノロジ	-	Accela BizSearch の文書参照画面におけるフィッシング脅威の脆弱性	CWE-noinfo 情報不足	-	2010-10-1 17:37	2010-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
281911	-	linux fedoraproject	linux_kernel fedora	Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-2666	2024-11-21 11:27	2015-05-27	Show	GitHub Exploit DB Packet Storm

281912	-	mit	kerberos_5	The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an int…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-2694	2024-11-21 11:27	2015-05-26	Show	GitHub Exploit DB Packet Storm

281913	-	realmd_project	realmd	realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response.	CWE-74 Injection	CVE-2015-2704	2024-11-21 11:27	2015-05-19	Show	GitHub Exploit DB Packet Storm

281914	-	gns3	gns3	Untrusted search path vulnerability in GNS3 1.2.3 allows local users to gain privileges via a Trojan horse uuid.dll in an unspecified directory.	NVD-CWE-Other	CVE-2015-2667	2024-11-21 11:27	2015-05-19	Show	GitHub Exploit DB Packet Storm

281915	-	huawei	seq_analyst	XML external entity (XXE) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter.	NVD-CWE-Other	CVE-2015-2346	2024-11-21 11:27	2015-05-19	Show	GitHub Exploit DB Packet Storm

281916	-	concrete5	concrete5	Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) banned_word[] parameter to index.php/dashboard/…	CWE-79 Cross-site Scripting	CVE-2015-2250	2024-11-21 11:27	2015-05-16	Show	GitHub Exploit DB Packet Storm

281917	-	mozilla	firefox	The update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the pathname for updater.exe corresponds to the application directory, which might allow local users to gain p…	CWE-17 Code	CVE-2015-2720	2024-11-21 11:27	2015-05-14	Show	GitHub Exploit DB Packet Storm

281918	-	opensuse mozilla	opensuse firefox	The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IF…	CWE-200 Information Exposure	CVE-2015-2718	2024-11-21 11:27	2015-05-14	Show	GitHub Exploit DB Packet Storm

281919	-	mozilla opensuse	firefox opensuse	Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and out-of-bounds read) vi…	CWE-189 Numeric Errors	CVE-2015-2717	2024-11-21 11:27	2015-05-14	Show	GitHub Exploit DB Packet Storm

281920	-	mozilla novell opensuse oracle	firefox suse_linux_enterprise_server suse_linux_enterprise_desktop opensuse suse_linux_enterprise_software_development_kit thunderbird solaris firefox_esr	Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amou…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-2716	2024-11-21 11:27	2015-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed