Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258271 10 危険 シマンテック
IBM
- Autonomy KeyView Filter SDK の kvolefio.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-3032 2010-08-19 18:22 2010-03-5 Show GitHub Exploit DB Packet Storm
258272 5 警告 The PHP Group - PHP の phar 拡張における重要な情報を取得される脆弱性 CWE-134
書式文字列の問題
CVE-2010-2094 2010-08-18 18:26 2010-05-14 Show GitHub Exploit DB Packet Storm
258273 7.5 危険 The PHP Group - PHP の sqlite_single_query および sqlite_array_query 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1868 2010-08-18 18:26 2010-05-7 Show GitHub Exploit DB Packet Storm
258274 7.5 危険 The PHP Group - PHP の dechunk フィルタにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2010-1866 2010-08-18 18:26 2010-05-2 Show GitHub Exploit DB Packet Storm
258275 5 警告 The PHP Group - PHP の chunk_split 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1862 2010-08-18 18:25 2010-05-4 Show GitHub Exploit DB Packet Storm
258276 5 警告 The PHP Group - PHP の addcslashes 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1864 2010-08-17 17:37 2010-05-3 Show GitHub Exploit DB Packet Storm
258277 5 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-2190 2010-08-17 17:36 2010-05-30 Show GitHub Exploit DB Packet Storm
258278 6.4 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2010-2191 2010-08-17 17:35 2010-05-31 Show GitHub Exploit DB Packet Storm
258279 5 警告 The PHP Group - PHP の Zend Engine における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1914 2010-08-17 17:34 2010-05-8 Show GitHub Exploit DB Packet Storm
258280 6.4 警告 The PHP Group - PHP の sysvshm 拡張における任意のメモリアドレスを書かれる脆弱性 CWE-399
リソース管理の問題
CVE-2010-1861 2010-08-17 17:33 2010-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282311 7.8 HIGH
Local
redhat automatic_bug_reporting_tool The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file. CWE-59
Link Following
CVE-2015-1869 2024-11-21 11:26 2020-01-15 Show GitHub Exploit DB Packet Storm
282312 6.5 MEDIUM
Network
tuxfamily chrony chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service (i… NVD-CWE-Other
CVE-2015-1853 2024-11-21 11:26 2019-12-10 Show GitHub Exploit DB Packet Storm
282313 5.3 MEDIUM
Network
cabextract_project cabextract cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character … CWE-22
Path Traversal
CVE-2015-2060 2024-11-21 11:26 2019-11-30 Show GitHub Exploit DB Packet Storm
282314 5.9 MEDIUM
Network
ruby-lang
debian
puppet
ruby
trunk
debian_linux
puppet_enterprise
puppet_agent
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attacker… CWE-20
 Improper Input Validation 
CVE-2015-1855 2024-11-21 11:26 2019-11-30 Show GitHub Exploit DB Packet Storm
282315 6.5 MEDIUM
Network
redhat virtualization
ovirt-engine
oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center CWE-863
 Incorrect Authorization
CVE-2015-1780 2024-11-21 11:26 2019-11-23 Show GitHub Exploit DB Packet Storm
282316 5.3 MEDIUM
Network
linuxfoundation opendaylight The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveraging missing AAA restrictions. CWE-200
Information Exposure
CVE-2015-1857 2024-11-21 11:26 2018-04-28 Show GitHub Exploit DB Packet Storm
282317 5.4 MEDIUM
Network
ibm security_appscan Cross-site scripting (XSS) vulnerability in IBM AppScan Enterprise Edition 9.0.x before 9.0.2 iFix 001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Fo… CWE-79
Cross-site Scripting
CVE-2015-1952 2024-11-21 11:26 2018-04-17 Show GitHub Exploit DB Packet Storm
282318 5.9 MEDIUM
Network
redhat rhn-client-tools rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1 and Enterprise Linux (RHEL) 5, 6, and 7 does not properly validate hostnames in X.509 certificates from… CWE-295
Improper Certificate Validation 
CVE-2015-1777 2024-11-21 11:26 2018-04-13 Show GitHub Exploit DB Packet Storm
282319 5.3 MEDIUM
Network
ibm websphere_mq IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-in-the-middle attack, related to duplication of message data… CWE-200
Information Exposure
CVE-2015-1957 2024-11-21 11:26 2018-04-11 Show GitHub Exploit DB Packet Storm
282320 7.8 HIGH
Local
ibm tivoli_directory_server The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before i… CWE-74
Injection
CVE-2015-1975 2024-11-21 11:26 2018-04-4 Show GitHub Exploit DB Packet Storm