Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258161	6.8	警告	アップル	-	Apple Mac OS X の CoreGraphics におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1801	2010-09-8 15:52	2010-08-25	Show	GitHub Exploit DB Packet Storm

258162	5	警告	アップル ClamAV	-	ClamAV の libclamav/mspack.c における qtm_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1311	2010-09-8 15:52	2010-04-8	Show	GitHub Exploit DB Packet Storm

258163	5	警告	アップル	-	Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1800	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

258164	6.8	警告	アップル	-	Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1808	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

258165	6.2	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo の secure path 機能における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1646	2010-09-8 15:50	2010-06-7	Show	GitHub Exploit DB Packet Storm

258166	6.9	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1163	2010-09-8 15:50	2010-04-16	Show	GitHub Exploit DB Packet Storm

258167	10	危険	ESET アップル ClamAV ソースネクスト	-	複数のアンチウィルス製品に脆弱性	CWE-noinfo 情報不足	CVE-2010-0098	2010-09-8 15:50	2010-04-13	Show	GitHub Exploit DB Packet Storm

258168	7.5	危険	The PHP Group アップル	-	PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1129	2010-09-8 15:49	2010-03-26	Show	GitHub Exploit DB Packet Storm

258169	4.4	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0427	2010-09-8 15:49	2010-02-25	Show	GitHub Exploit DB Packet Storm

258170	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2784	2010-09-7 15:51	2010-08-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
282001	7.8	HIGH Local	epicor	crs_retail_store	The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command sh…	CWE-77 Command Injection	CVE-2015-2210	2024-11-21 11:27	2017-09-7	Show	GitHub Exploit DB Packet Storm

282002	7.5	HIGH Network	gnome	librest	The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (appli…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-2675	2024-11-21 11:27	2017-08-19	Show	GitHub Exploit DB Packet Storm

282003	4.7	MEDIUM Local	openstack	compute	OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.	CWE-284 Improper Access Control	CVE-2015-2687	2024-11-21 11:27	2017-08-10	Show	GitHub Exploit DB Packet Storm

282004	5.9	MEDIUM Network	restkit	restkit	Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.	CWE-295 Improper Certificate Validation	CVE-2015-2674	2024-11-21 11:27	2017-08-10	Show	GitHub Exploit DB Packet Storm

282005	7.5	HIGH Network	capnproto	capnproto	Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service (CPU consumption)…	CWE-400 Uncontrolled Resource Consumption	CVE-2015-2313	2024-11-21 11:27	2017-08-10	Show	GitHub Exploit DB Packet Storm

282006	7.5	HIGH Network	capnproto	capnproto	Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service (CPU and possibly general resource consumption) via a list with a large number of elemen…	CWE-400 Uncontrolled Resource Consumption	CVE-2015-2312	2024-11-21 11:27	2017-08-10	Show	GitHub Exploit DB Packet Storm

282007	9.8	CRITICAL Network	capnproto	capnproto	Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execut…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2015-2311	2024-11-21 11:27	2017-08-10	Show	GitHub Exploit DB Packet Storm

282008	9.1	CRITICAL Network	capnproto	capnproto	Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory v…	CWE-190 Integer Overflow or Wraparound	CVE-2015-2310	2024-11-21 11:27	2017-08-10	Show	GitHub Exploit DB Packet Storm

282009	9.8	CRITICAL Network	zohocorp	manageengine_desktop_central	Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-2560	2024-11-21 11:27	2017-08-3	Show	GitHub Exploit DB Packet Storm

282010	6.1	MEDIUM Network	digium	addons_module	Multiple cross-site scripting (XSS) vulnerabilities in views/add-license-form.php in the Digium Addons module (digiumaddoninstaller) before 2.11.0.7 for FreePBX allow remote attackers to inject arbit…	CWE-79 Cross-site Scripting	CVE-2015-2690	2024-11-21 11:27	2017-08-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed