Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258421	3.3	注意	レッドハット	-	Firefox の SPICE プラグインにおける重要な情報を取得される脆弱性	CWE-362 競合状態	CVE-2010-2792	2010-09-15 17:13	2010-08-25	Show	GitHub Exploit DB Packet Storm

258422	1.9	注意	シトリックス・システムズ	-	Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-2619	2010-09-14 15:55	2010-06-17	Show	GitHub Exploit DB Packet Storm

258423	4.6	警告	シトリックス・システムズ	-	Citrix XenServer における認証を回避され Xen API (XAPI) を実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0633	2010-09-14 15:54	2010-02-12	Show	GitHub Exploit DB Packet Storm

258424	4.3	警告	シトリックス・システムズ	-	複数の Citrix XenServer 製品の XenAPI HTTP インターフェイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3253	2010-09-14 15:54	2008-07-16	Show	GitHub Exploit DB Packet Storm

258425	7.5	危険	シトリックス・システムズ	-	Citrix XenCenterWeb の XenServer Resource Kit における PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3760	2010-09-14 15:54	2009-10-22	Show	GitHub Exploit DB Packet Storm

258426	6	警告	シトリックス・システムズ	-	Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-3759	2010-09-14 15:54	2009-10-22	Show	GitHub Exploit DB Packet Storm

258427	7.5	危険	シトリックス・システムズ	-	Citrix XenCenterWeb の XenServer Resource Kit における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3758	2010-09-14 15:53	2009-10-22	Show	GitHub Exploit DB Packet Storm

258428	4.3	警告	シトリックス・システムズ	-	Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3757	2010-09-14 15:53	2009-10-22	Show	GitHub Exploit DB Packet Storm

258429	7.2	危険	シトリックス・システムズ	-	Xen の xend におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5716	2010-09-14 15:53	2008-12-24	Show	GitHub Exploit DB Packet Storm

258430	6	警告	VMware	-	VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-2667	2010-09-13 16:05	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277911	5.5	MEDIUM Local	huawei	e3272s_firmware	Huawei MBB (Mobile Broadband) product E3272s with software versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 has a Denial of Service (DoS) vulnerability. An attacker could send a malicious …	CWE-20 Improper Input Validation	CVE-2015-7847	2024-11-21 11:37	2017-04-3	Show	GitHub Exploit DB Packet Storm

277912	7.5	HIGH Network	huawei	fusionaccess	Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not …	CWE-20 Improper Input Validation	CVE-2015-7844	2024-11-21 11:37	2017-04-3	Show	GitHub Exploit DB Packet Storm

277913	6.1	MEDIUM Network	icinga opensuse_project opensuse	icinga leap	Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the…	CWE-79 Cross-site Scripting	CVE-2015-8010	2024-11-21 11:37	2017-03-28	Show	GitHub Exploit DB Packet Storm

277914	7.8	HIGH Local	exfat_project	exfat	Heap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service (infinite loop) or possibly execute arbitr…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8026	2024-11-21 11:37	2017-03-28	Show	GitHub Exploit DB Packet Storm

277915	8.1	HIGH Network	windriver	vxworks	Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a de…	CWE-190 Integer Overflow or Wraparound	CVE-2015-7599	2024-11-21 11:37	2017-02-8	Show	GitHub Exploit DB Packet Storm

277916	3.3	LOW Local	saltstack	salt	The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.	CWE-200 Information Exposure	CVE-2015-8034	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

277917	7.5	HIGH Network	ntp	ntp	NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a bro…	CWE-19 Data Processing Errors	CVE-2015-7979	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

277918	7.5	HIGH Network	ntp	ntp	NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction…	CWE-400 Uncontrolled Resource Consumption	CVE-2015-7978	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

277919	5.9	MEDIUM Network	ntp oracle siemens netapp freebsd fedoraproject debian canonical	ntp linux tim_4r-ie_firmware tim_4r-ie_dnp3_firmware oncommand_balance clustered_data_ontap freebsd fedora debian_linux ubuntu_linux	ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.	CWE-476 NULL Pointer Dereference	CVE-2015-7977	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

277920	4.3	MEDIUM Network	ntp suse novell opensuse	ntp linux_enterprise_server linux_enterprise_debuginfo manager_proxy manager linux_enterprise_desktop suse_openstack_cloud leap opensuse suse_linux_enterprise_server	The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a c…	CWE-254 7PK - Security Features	CVE-2015-7976	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed