Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242131 7.8 危険 シスコシステムズ - Cisco IOS XR の SSH サーバの sshd_child_handler プロセスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0137 2012-06-26 16:19 2010-01-20 Show GitHub Exploit DB Packet Storm
242132 9.3 危険 Autonomy - IBM 製品などに使用される Autonomy KeyView の rtfsr.dll における整数符号化エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0134 2012-06-26 16:19 2010-08-17 Show GitHub Exploit DB Packet Storm
242133 2.1 注意 becauseinter
FreeBSD		 - FreeBSD 上の Bournal における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0119 2012-06-26 16:19 2010-02-24 Show GitHub Exploit DB Packet Storm
242134 3.3 注意 becauseinter - Bournal における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-0118 2012-06-26 16:19 2010-02-24 Show GitHub Exploit DB Packet Storm
242135 9.3 危険 energizer - Energizer DUO USB の UsbCharger.dll におけるプログラムを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0103 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
242136 7.5 危険 GNU Project - GNU C Library の nis/nss_nis/nis-pwd.c における NIS アカウントの暗号化されたパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-0015 2012-06-26 16:19 2010-01-14 Show GitHub Exploit DB Packet Storm
242137 3.7 注意 Fedora Project - SSSD における制限されたアクセスを回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-0014 2012-06-26 16:19 2010-01-14 Show GitHub Exploit DB Packet Storm
242138 4.3 警告 Apache Software Foundation - Apache CouchDB における重要情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0009 2012-06-26 16:19 2010-04-5 Show GitHub Exploit DB Packet Storm
242139 2.1 注意 GNU Project - Bash の /etc/profile.d/60alias.sh スクリプトにおける存在するファイルを非表示にされる脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0002 2012-06-26 16:19 2010-01-14 Show GitHub Exploit DB Packet Storm
242140 4.3 警告 aj square - AJ Auction Pro OOPD の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4989 2012-06-26 16:19 2010-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268791 3.7 LOW
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other pa… CWE-320
 Key Management Errors 		CVE-2016-1000346 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
268792 5.9 MEDIUM
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed,… CWE-361
 7PK - Time and State 		CVE-2016-1000345 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
268793 7.4 HIGH
Network 		bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider. CWE-310
Cryptographic Issues 		CVE-2016-1000344 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
268794 7.5 HIGH
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initial… CWE-310
Cryptographic Issues 		CVE-2016-1000343 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
268795 7.5 HIGH
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2016-1000342 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
268796 5.9 MEDIUM
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of… CWE-361
 7PK - Time and State 		CVE-2016-1000341 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
268797 7.5 HIGH
Network 		bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.r… CWE-19
 Data Processing Errors 		CVE-2016-1000340 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
268798 5.3 MEDIUM
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table driven approach used in the algorithm it turns out that if … CWE-310
Cryptographic Issues 		CVE-2016-1000339 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
268799 7.5 HIGH
Network 		bouncycastle
redhat
canonical
netapp 		legion-of-the-bouncy-castle-java-crytography-api
satellite_capsule
ubuntu_linux
satellite
7-mode_transition_tool 		In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up t… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2016-1000338 2024-11-21 11:43 2018-06-2 Show GitHub Exploit DB Packet Storm
268800 9.8 CRITICAL
Network 		jfrog artifactory Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbitrary servlet application and execute arbitrary code by uplo… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-10036 2024-11-21 11:43 2018-05-2 Show GitHub Exploit DB Packet Storm