Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
260871	9.3	危険	マイクロソフト	-	Microsoft Project における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-0102	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

260872	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-94 コード・インジェクション	CVE-2009-3673	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

260873	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3671	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

260874	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性	CWE-255 CWE-94	CVE-2009-3677	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

260875	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2505	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

260876	6.9	警告	acpid	-	acpid の umask におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4235	2010-01-21 11:44	2009-12-7	Show	GitHub Exploit DB Packet Storm

260877	6.9	警告	サイバートラスト株式会社レッドハット acpid	-	acpid のレッドハットパッチにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4033	2010-01-21 11:43	2009-12-7	Show	GitHub Exploit DB Packet Storm

260878	10	危険	アドビシステムズ	-	Adobe Illustrator における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3952	2010-01-21 11:43	2010-01-7	Show	GitHub Exploit DB Packet Storm

260879	9.3	危険	アドビシステムズ	-	Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4195	2010-01-21 11:43	2009-12-4	Show	GitHub Exploit DB Packet Storm

260880	4.4	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1337	2010-01-21 11:23	2009-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
280421	5.5	MEDIUM Local	huawei	e3272s_firmware	Huawei MBB (Mobile Broadband) product E3272s with software versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 has a Denial of Service (DoS) vulnerability. An attacker could send a malicious …	CWE-20 Improper Input Validation	CVE-2015-7847	2024-11-21 11:37	2017-04-3	Show	GitHub Exploit DB Packet Storm

280422	7.5	HIGH Network	huawei	fusionaccess	Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not …	CWE-20 Improper Input Validation	CVE-2015-7844	2024-11-21 11:37	2017-04-3	Show	GitHub Exploit DB Packet Storm

280423	6.1	MEDIUM Network	icinga opensuse_project opensuse	icinga leap	Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the…	CWE-79 Cross-site Scripting	CVE-2015-8010	2024-11-21 11:37	2017-03-28	Show	GitHub Exploit DB Packet Storm

280424	7.8	HIGH Local	exfat_project	exfat	Heap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service (infinite loop) or possibly execute arbitr…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8026	2024-11-21 11:37	2017-03-28	Show	GitHub Exploit DB Packet Storm

280425	8.1	HIGH Network	windriver	vxworks	Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a de…	CWE-190 Integer Overflow or Wraparound	CVE-2015-7599	2024-11-21 11:37	2017-02-8	Show	GitHub Exploit DB Packet Storm

280426	3.3	LOW Local	saltstack	salt	The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.	CWE-200 Information Exposure	CVE-2015-8034	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

280427	7.5	HIGH Network	ntp	ntp	NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a bro…	CWE-19 Data Processing Errors	CVE-2015-7979	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

280428	7.5	HIGH Network	ntp	ntp	NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction…	CWE-400 Uncontrolled Resource Consumption	CVE-2015-7978	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

280429	5.9	MEDIUM Network	ntp oracle siemens netapp freebsd fedoraproject debian canonical	ntp linux tim_4r-ie_firmware tim_4r-ie_dnp3_firmware oncommand_balance clustered_data_ontap freebsd fedora debian_linux ubuntu_linux	ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.	CWE-476 NULL Pointer Dereference	CVE-2015-7977	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

280430	4.3	MEDIUM Network	ntp suse novell opensuse	ntp linux_enterprise_server linux_enterprise_debuginfo manager_proxy manager linux_enterprise_desktop suse_openstack_cloud leap opensuse suse_linux_enterprise_server	The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a c…	CWE-254 7PK - Security Features	CVE-2015-7976	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed