Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
197661	9.8	緊急 Network	Magento, Inc.	-	Magento CE および EE における PHP オブジェクトインジェクション攻撃を実行される脆弱性	CWE-74 インジェクション	CVE-2016-4010	2017-02-8 17:23	2016-05-17	Show	GitHub Exploit DB Packet Storm

197662	9.8	緊急 Network	LibGD project	-	GD Graphics ライブラリの gdImageWebPtr 関数におけるメモリ二重解放の脆弱性	CWE-415 二重解放	CVE-2016-6912	2017-02-8 17:03	2016-08-17	Show	GitHub Exploit DB Packet Storm

197663	7.8	重要 Local	シトリックス・システムズ Xen プロジェクト	-	Xen の x86 エミュレータにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-9386	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

197664	6	警告 Local	シトリックス・システムズ Xen プロジェクト	-	Xen の x86 セグメントベースの書き込みのエミュレーション機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-9385	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

197665	8.8	重要 Local	シトリックス・システムズ Xen プロジェクト	-	Xen における任意のメモリを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2016-9383	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

197666	7.8	重要 Local	シトリックス・システムズ Xen プロジェクト	-	Xen における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-9382	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

197667	7.5	重要 Local	シトリックス・システムズ Fabrice Bellard	-	Xen の QEMU における権限を取得される脆弱性	CWE-264 CWE-362	CVE-2016-9381	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

197668	8.8	重要 Adjacent	Ubiquiti Networks	-	Ubiquiti Networks UniFi におけるデータベースを変更される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-7792	2017-02-8 16:52	2016-09-30	Show	GitHub Exploit DB Packet Storm

197669	7.5	重要 Network	jwt project	-	jwt の Encryption/Symmetric.php の verify 関数における署名を偽造される脆弱性	CWE-361 時間とステータス	CVE-2016-7037	2017-02-8 16:50	2016-09-6	Show	GitHub Exploit DB Packet Storm

197670	9.1	緊急 Network	Doorkeeper project	-	Ruby 用 Doorkeeper gem における反射攻撃を実行される脆弱性	CWE-254 セキュリティ機能	CVE-2016-6582	2017-02-8 16:49	2016-08-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348251	-	ircd-ratbox	ircd-ratbox	cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a HELP command.	NVD-CWE-Other	CVE-2010-0300	2010-02-5 14:00	2010-02-5	Show	GitHub Exploit DB Packet Storm

348252	-	ircd-ratbox	ircd-ratbox	Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'	NVD-CWE-Other	CVE-2010-0300	2010-02-5 14:00	2010-02-5	Show	GitHub Exploit DB Packet Storm

348253	-	xerox	workcentre_5632 workcentre_5638 workcentre_5645 workcentre_5655 workcentre_5665 workcentre_5675 workcentre_5687	Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unkno…	CWE-200 Information Exposure	CVE-2010-0548	2010-02-5 14:00	2010-02-5	Show	GitHub Exploit DB Packet Storm

348254	-	ircd-hybrid ircd-ratbox oftc	ircd-hybrid ircd-ratbox oftc-hybrid	Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, when flatten_links is disabled, allo…	CWE-189 Numeric Errors	CVE-2009-4016	2010-02-5 14:00	2010-02-5	Show	GitHub Exploit DB Packet Storm

348255	-	comtrend	ct-507it_adsl_router	Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter.	CWE-79 Cross-site Scripting	CVE-2010-0470	2010-02-3 14:00	2010-02-3	Show	GitHub Exploit DB Packet Storm

348256	-	viewvc	viewvc	query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access r…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0005	2010-02-2 14:00	2010-01-30	Show	GitHub Exploit DB Packet Storm

348257	-	mozilla	seamonkey thunderbird	Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the app type is APP_TYPE_MAIL or APP_TYPE_EDITOR, which makes it easier for remote a…	CWE-200 Information Exposure	CVE-2009-4629	2010-02-2 14:00	2010-01-30	Show	GitHub Exploit DB Packet Storm

348258	-	cisco	unified_meetingplace	Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) a…	NVD-CWE-noinfo	CVE-2010-0140	2010-01-31 14:00	2010-01-29	Show	GitHub Exploit DB Packet Storm

348259	-	cisco	unified_meetingplace	Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml Affected Products Vulnerable Products Cisco Unified MeetingPlace versions 5, 6, and 7 are each affec…	NVD-CWE-noinfo	CVE-2010-0140	2010-01-31 14:00	2010-01-29	Show	GitHub Exploit DB Packet Storm

348260	-	cisco	unified_meetingplace	MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0142	2010-01-31 14:00	2010-01-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed