Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258101 4.3 警告 シトリックス・システムズ - 複数の Citrix XenServer 製品の XenAPI HTTP インターフェイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3253 2010-09-14 15:54 2008-07-16 Show GitHub Exploit DB Packet Storm
258102 7.5 危険 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit における PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2009-3760 2010-09-14 15:54 2009-10-22 Show GitHub Exploit DB Packet Storm
258103 6 警告 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-3759 2010-09-14 15:54 2009-10-22 Show GitHub Exploit DB Packet Storm
258104 7.5 危険 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3758 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
258105 4.3 警告 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3757 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
258106 7.2 危険 シトリックス・システムズ - Xen の xend におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5716 2010-09-14 15:53 2008-12-24 Show GitHub Exploit DB Packet Storm
258107 6 警告 VMware - VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-2667 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
258108 4.4 警告 VMware - VMware Studio における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2427 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
258109 6.8 警告 VMware - VMware SpringSource tc Server Runtime における JMX インターフェイスへのアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-1454 2010-09-13 16:05 2010-05-13 Show GitHub Exploit DB Packet Storm
258110 4.3 警告 VMware - VMware View におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1143 2010-09-13 16:04 2010-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250341 8.1 HIGH
Network
redhat
debian
gluster
opensuse
enterprise_linux_server
debian_linux
glusterfs
virtualization_host
leap
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster b… - CVE-2018-10927 2024-11-21 12:42 2018-09-5 Show GitHub Exploit DB Packet Storm
250342 8.8 HIGH
Network
redhat
debian
gluster
opensuse
enterprise_linux
enterprise_linux_server
debian_linux
virtualization_host
glusterfs
leap
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execut… - CVE-2018-10926 2024-11-21 12:42 2018-09-5 Show GitHub Exploit DB Packet Storm
250343 6.5 MEDIUM
Network
gluster glusterfs It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume… CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2018-10924 2024-11-21 12:42 2018-09-5 Show GitHub Exploit DB Packet Storm
250344 8.1 HIGH
Network
gluster
redhat
debian
opensuse
glusterfs
enterprise_linux_server
debian_linux
virtualization_host
leap
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and re… - CVE-2018-10923 2024-11-21 12:42 2018-09-4 Show GitHub Exploit DB Packet Storm
250345 6.5 MEDIUM
Network
gluster
redhat
debian
opensuse
glusterfs
enterprise_linux_server
virtualization_host
debian_linux
leap
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enable… - CVE-2018-10914 2024-11-21 12:42 2018-09-4 Show GitHub Exploit DB Packet Storm
250346 6.5 MEDIUM
Network
gluster
redhat
debian
opensuse
glusterfs
enterprise_linux_server
debian_linux
virtualization_host
leap
An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the existence of any file. - CVE-2018-10913 2024-11-21 12:42 2018-09-4 Show GitHub Exploit DB Packet Storm
250347 7.5 HIGH
Network
gluster
redhat
debian
opensuse
glusterfs
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
virtualization_host
debian_linux
leap
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attacker could use this flaw to read memory from other locations into the stored dict … - CVE-2018-10911 2024-11-21 12:42 2018-09-4 Show GitHub Exploit DB Packet Storm
250348 8.8 HIGH
Network
gluster
redhat
debian
opensuse
glusterfs
enterprise_linux_server
virtualization_host
debian_linux
leap
It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attac… - CVE-2018-10907 2024-11-21 12:42 2018-09-4 Show GitHub Exploit DB Packet Storm
250349 8.8 HIGH
Network
gluster
redhat
debian
opensuse
glusterfs
enterprise_linux_server
virtualization_host
debian_linux
leap
It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the "debug/io-stats" translator. Attacker can use this flaw… - CVE-2018-10904 2024-11-21 12:42 2018-09-4 Show GitHub Exploit DB Packet Storm
250350 5.9 MEDIUM
Network
dell
oracle
bsafe
jd_edwards_enterpriseone_tools
security_service
enterprise_manager_ops_center
application_testing_suite
retail_predictive_application_server
communications_ip_service_activato…
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2018-11057 2024-11-21 12:42 2018-09-1 Show GitHub Exploit DB Packet Storm