Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194061 7.8 重要
Local
Debian
Terminology project
- Terminology における任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2015-8971 2017-02-6 17:32 2015-08-17 Show GitHub Exploit DB Packet Storm
194062 7.8 重要
Local
マイクロソフト - Microsoft Skype における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5720 2017-02-6 17:04 2016-09-27 Show GitHub Exploit DB Packet Storm
194063 8.4 重要
Local
ownCloud - ownCloud Desktop における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2016-7102 2017-02-6 16:24 2016-08-17 Show GitHub Exploit DB Packet Storm
194064 5.9 警告
Network
ownCloud - ownCloud サーバにおける任意の画像をダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5876 2017-02-6 16:24 2016-07-13 Show GitHub Exploit DB Packet Storm
194065 9.8 緊急
Network
シックス・アパート株式会社 - 複数の Movable Type 製品における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-5742 2017-02-6 16:23 2016-06-22 Show GitHub Exploit DB Packet Storm
194066 7.5 重要
Network
GStreamer - GStreamer の vmnc デコーダにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9445 2017-02-6 15:49 2016-11-16 Show GitHub Exploit DB Packet Storm
194067 7.5 重要
Local
シトリックス・システムズ
Xen プロジェクト
- Xen の pygrub ブートローダエミュレータにおけるホスト上の任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2016-9380 2017-02-6 15:48 2016-11-22 Show GitHub Exploit DB Packet Storm
194068 7.9 重要
Local
シトリックス・システムズ
Xen プロジェクト
- Xen の pygrub ブートローダエミュレータにおけるホスト上の任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2016-9379 2017-02-6 15:48 2016-11-22 Show GitHub Exploit DB Packet Storm
194069 9.8 緊急
Network
OpenSLP - OpenSLP の common/slp_compare.c の SLPFoldWhiteSpace 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-7567 2017-02-6 15:48 2016-09-27 Show GitHub Exploit DB Packet Storm
194070 5.5 警告
Local
libdwarf project - libdwarf の dwarf_loc.c の _dwarf_read_loc_section 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-7410 2017-02-6 15:48 2016-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294131 - apple safari
webkit
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly restrict the reading of a canvas that contains an SVG image pattern fro… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-1416 2017-09-19 10:30 2010-06-12 Show GitHub Exploit DB Packet Storm
294132 - apple safari
webkit
The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arb… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-1417 2017-09-19 10:30 2010-06-12 Show GitHub Exploit DB Packet Storm
294133 - apple safari
webkit
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary w… CWE-79
Cross-site Scripting
CVE-2010-1418 2017-09-19 10:30 2010-06-12 Show GitHub Exploit DB Packet Storm
294134 - apple safari
webkit
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows user-assisted remote attackers to execute arbitrar… CWE-399
 Resource Management Errors
CVE-2010-1419 2017-09-19 10:30 2010-06-12 Show GitHub Exploit DB Packet Storm
294135 - apple safari
webkit
The execCommand JavaScript function in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly restrict remote execution of cli… NVD-CWE-Other
CVE-2010-1421 2017-09-19 10:30 2010-06-12 Show GitHub Exploit DB Packet Storm
294136 - apple safari
webkit
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle changes to keyboard focus that occur during processing of key pr… NVD-CWE-Other
CVE-2010-1422 2017-09-19 10:30 2010-06-12 Show GitHub Exploit DB Packet Storm
294137 - redhat yum-rhn-plugin yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, wh… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-1439 2017-09-19 10:30 2010-06-8 Show GitHub Exploit DB Packet Storm
294138 - postgresql postgresql The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 be… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-1447 2017-09-19 10:30 2010-05-20 Show GitHub Exploit DB Packet Storm
294139 - ethereal_group
wireshark
ethereal
wireshark
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file. CWE-20
 Improper Input Validation 
CVE-2010-1455 2017-09-19 10:30 2010-05-12 Show GitHub Exploit DB Packet Storm
294140 - ibm lotus_notes IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG. CWE-255
Credentials Management
CVE-2010-1487 2017-09-19 10:30 2010-04-21 Show GitHub Exploit DB Packet Storm