Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
205161	9.8	緊急 Network	The PHP Group	-	PHP の zip エクステンションの php_zip.c における整数オーバーフローの脆弱性	CWE-Other その他	CVE-2016-3078	2016-08-10 14:43	2016-04-28	Show	GitHub Exploit DB Packet Storm

205162	5.4	警告 Network	Apache Software Foundation	-	Apache ActiveMQ の管理 Web コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-0782	2016-08-10 14:25	2016-03-14	Show	GitHub Exploit DB Packet Storm

205163	5	警告	OpenSSL Project オラクル	-	OpenSSL の d1_pkt.c の dtls1_buffer_record 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2015-0206	2016-08-9 18:16	2015-01-7	Show	GitHub Exploit DB Packet Storm

205164	5	警告	アップル日本電気 OpenSSL Project ヒューレット・パッカードオラクル	-	OpenSSL における指紋ベースの認証ブラックリスト保護メカニズムを破られる脆弱性	CWE-310 暗号の問題	CVE-2014-8275	2016-08-9 18:15	2014-12-20	Show	GitHub Exploit DB Packet Storm

205165	5	警告	アップル OpenSSL Project ヒューレット・パッカードオラクル	-	OpenSSL の s3_clnt.c 内の ssl3_get_key_exchange 関数における ECDHE-to-ECDH ダウングレード攻撃を実行される脆弱性	CWE-310 暗号の問題	CVE-2014-3572	2016-08-9 18:14	2014-10-24	Show	GitHub Exploit DB Packet Storm

205166	5	警告	日本電気アップルヒューレット・パッカード OpenSSL Project オラクル日立	-	OpenSSL の BN_sqr の実装における暗号保護メカニズムを破られる脆弱性	CWE-310 暗号の問題	CVE-2014-3570	2016-08-9 18:14	2014-05-14	Show	GitHub Exploit DB Packet Storm

205167	7.3	重要 Local	Google	-	複数の Nexus デバイス上で稼働する Android の Qualcomm ブートローダの app/aboot/aboot.c における整数オーバーフローの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3850	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

205168	7.8	重要 Local	Google	-	Pixel C デバイス上で稼働する Android の ION ドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3849	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

205169	7.8	重要 Local	Google	-	Nexus 9 デバイス上で稼働する Android の NVIDIA メディアドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3847	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

205170	7.8	重要 Local	Google	-	Nexus 5 デバイス上で稼働する Android のカーネルのビデオドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3845	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
355261	-	apple	safari webkit	WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an in…	CWE-399 Resource Management Errors	CVE-2010-1729	2011-02-17 15:55	2010-05-6	Show	GitHub Exploit DB Packet Storm

355262	-	apple	safari webkit	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6, and before 4.1 on Mac OS X 10.4, does not properly handle clipboard (1) drag and (2) paste operations for URLs, which allows user-assi…	CWE-200 Information Exposure	CVE-2010-1388	2011-02-17 15:54	2010-06-12	Show	GitHub Exploit DB Packet Storm

355263	-	fetchmail	fetchmail	Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2001-1009	2011-02-16 14:00	2001-08-31	Show	GitHub Exploit DB Packet Storm

355264	-	fetchmail	fetchmail	fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.	CWE-59 Link Following	CVE-2001-1378	2011-02-16 14:00	2001-09-6	Show	GitHub Exploit DB Packet Storm

355265	-	fetchmail	fetchmail	fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the bound…	CWE-20 Improper Input Validation	CVE-2002-0146	2011-02-16 05:45	2002-06-25	Show	GitHub Exploit DB Packet Storm

355266	-	php	php	Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary…	CWE-134 Use of Externally-Controlled Format String	CVE-2010-2094	2011-01-26 15:48	2010-05-28	Show	GitHub Exploit DB Packet Storm

355267	-	typsoft	typsoft_ftp_server	Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 i…	CWE-399 Resource Management Errors	CVE-2005-3294	2011-01-26 14:00	2005-10-24	Show	GitHub Exploit DB Packet Storm

355268	-	wordpress	wordpress	WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0682	2011-01-19 15:55	2010-02-24	Show	GitHub Exploit DB Packet Storm

355269	-	phpf1	max\'s_image_uploader	Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, a…	NVD-CWE-Other	CVE-2010-0390	2011-01-12 14:00	2010-01-27	Show	GitHub Exploit DB Packet Storm

355270	-	phpf1	max\'s_image_uploader	Per: http://cwe.mitre.org/data/definitions/434.html 'CWE-434: Unrestricted Upload of File with Dangerous Type'	NVD-CWE-Other	CVE-2010-0390	2011-01-12 14:00	2010-01-27	Show	GitHub Exploit DB Packet Storm