Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255261	6.9	警告	Gentoo Linux レッドハット	-	logrotate の shred_file 関数における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1154	2011-04-27 11:40	2011-03-30	Show	GitHub Exploit DB Packet Storm

255262	1.9	注意	Gentoo Linux レッドハット	-	logrotate の createOutputFile 関数におけるログデータを閲覧される脆弱性	CWE-362 競合状態	CVE-2011-1098	2011-04-27 11:39	2011-03-30	Show	GitHub Exploit DB Packet Storm

255263	6.9	警告	サイバートラスト株式会社 libvirt.org レッドハット	-	複数のレッドハット製品などで利用される libvirt の libvirt.c における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1146	2011-04-27 11:34	2011-02-17	Show	GitHub Exploit DB Packet Storm

255264	5.1	警告	rsync.samba.org レッドハット	-	rsync における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1097	2011-04-27 11:32	2011-03-26	Show	GitHub Exploit DB Packet Storm

255265	6.9	警告	GNOME Project レッドハット	-	GNOME Display Manager におけるファイルの所有権を変更される脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0727	2011-04-27 11:31	2011-03-28	Show	GitHub Exploit DB Packet Storm

255266	7.5	危険	レッドハット	-	Plone における管理者のアクセス権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-0720	2011-04-27 11:30	2011-02-3	Show	GitHub Exploit DB Packet Storm

255267	7.5	危険	CA Technologies	-	複数の CA 製品の mng_core_com.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3984	2011-04-27 11:29	2010-12-9	Show	GitHub Exploit DB Packet Storm

255268	2.1	注意	freedesktop.org サイバートラスト株式会社レッドハット	-	D-Bus におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4352	2011-04-27 11:26	2010-12-30	Show	GitHub Exploit DB Packet Storm

255269	-	-	foolabs	-	Foolabs Xpdf にサービス運用妨害 (DoS) の脆弱性	-	-	2011-04-26 12:35	2011-03-22	Show	GitHub Exploit DB Packet Storm

255270	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1141	2011-04-26 12:28	2011-02-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310691	-	mpesch3.de1	1by1	Stack-based buffer overflow in 1by1 1.67 (aka 1.6.7.0) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playlist…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-4932	2024-11-21 10:10	2010-07-12	Show	GitHub Exploit DB Packet Storm

310692	-	bestwebsharing	groovy_media_player	Stack-based buffer overflow in Groovy Media Player 1.1.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playli…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-4931	2024-11-21 10:10	2010-07-12	Show	GitHub Exploit DB Packet Storm

310693	-	sungard	banner_student	Cross-site scripting (XSS) vulnerability in the twbkwbis.P_SecurityQuestion (aka Change Security Question) page in SunGard Banner Student System 7.4 allows remote attackers to inject arbitrary web sc…	CWE-79 Cross-site Scripting	CVE-2009-4930	2024-11-21 10:10	2010-07-12	Show	GitHub Exploit DB Packet Storm

310694	-	sweetphp	totalcalender	admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attackers to change arbitrary passwords via the newPW1 and newPW2 parameters.	CWE-287 Improper Authentication	CVE-2009-4929	2024-11-21 10:10	2010-07-12	Show	GitHub Exploit DB Packet Storm

310695	-	sweetphp	totalcalendar	PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter, a different vector than CVE-2006-1…	CWE-94 Code Injection	CVE-2009-4928	2024-11-21 10:10	2010-07-12	Show	GitHub Exploit DB Packet Storm

310696	-	webmobo	wbnews	WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1.	CWE-287 Improper Authentication	CVE-2009-4927	2024-11-21 10:10	2010-07-12	Show	GitHub Exploit DB Packet Storm

310697	-	esoftpro	online_contact_manager	Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showGroup parameter…	CWE-79 Cross-site Scripting	CVE-2009-4926	2024-11-21 10:10	2010-07-12	Show	GitHub Exploit DB Packet Storm

310698	-	creasito	creasito_e-commerce_content_manager	Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary …	CWE-89 SQL Injection	CVE-2009-4925	2024-11-21 10:10	2010-07-12	Show	GitHub Exploit DB Packet Storm

310699	-	dan_pascu	python-cjson	Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Fire…	CWE-79 Cross-site Scripting	CVE-2009-4924	2024-11-21 10:10	2010-07-3	Show	GitHub Exploit DB Packet Storm

310700	-	cisco	asa_5580	Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (…	NVD-CWE-noinfo	CVE-2009-4923	2024-11-21 10:10	2010-06-30	Show	GitHub Exploit DB Packet Storm