Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251011 6.9 警告 gnucash - GnuCash の gnc-test-env における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3999 2012-03-27 18:42 2010-11-5 Show GitHub Exploit DB Packet Storm
251012 6.9 警告 banshee-project - Banshee の banshee-1 スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3998 2012-03-27 18:42 2010-11-5 Show GitHub Exploit DB Packet Storm
251013 6.9 警告 cstr - CSTR Festival の festival_server における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3996 2012-03-27 18:42 2010-11-5 Show GitHub Exploit DB Packet Storm
251014 4.3 警告 ヒューレット・パッカード - HP VCRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3994 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
251015 6.4 警告 ヒューレット・パッカード - HP Insight Control Server Migration における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3993 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
251016 9 危険 ヒューレット・パッカード - HP Insight Control Server Migration における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3992 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
251017 10 危険 Novell - SUSE Linux Enterprise の supportconfig スクリプトにおける脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-3912 2012-03-27 18:42 2011-01-12 Show GitHub Exploit DB Packet Storm
251018 4.3 警告 ヒューレット・パッカード - HP Insight Control Server Migration におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3991 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
251019 5 警告 ヒューレット・パッカード - HP Virtual Server Environment における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2010-3990 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
251020 6.8 警告 ヒューレット・パッカード - HP Insight Control Virtual Machine Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3989 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266791 5.4 MEDIUM
Network 		ibm spectrum_control IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properti… CWE-284
Improper Access Control 		CVE-2016-5943 2024-11-21 11:55 2016-09-26 Show GitHub Exploit DB Packet Storm
266792 8.8 HIGH
Local 		moxa active_opc_server Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory. CWE-428
 Unquoted Search Path or Element 		CVE-2016-5793 2024-11-21 11:55 2016-09-24 Show GitHub Exploit DB Packet Storm
266793 8.4 HIGH
Local 		redhat quickstart_cloud_installer The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force … CWE-254
 7PK - Security Features 		CVE-2016-6340 2024-11-21 11:55 2016-09-23 Show GitHub Exploit DB Packet Storm
266794 8.4 HIGH
Local 		redhat quickstart_cloud_installer Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6322 2024-11-21 11:55 2016-09-23 Show GitHub Exploit DB Packet Storm
266795 5.5 MEDIUM
Local 		artifex
opensuse 		mupdf
leap
opensuse 		Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service (crash) via a crafted PDF file. CWE-416
 Use After Free 		CVE-2016-6265 2024-11-21 11:55 2016-09-23 Show GitHub Exploit DB Packet Storm
266796 9.8 CRITICAL
Network 		debian
westes 		debian_linux
flex 		Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6354 2024-11-21 11:55 2016-09-21 Show GitHub Exploit DB Packet Storm
266797 8.6 HIGH
Network 		oracle
libarchive 		linux
libarchive 		Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying f… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-6250 2024-11-21 11:55 2016-09-21 Show GitHub Exploit DB Packet Storm
266798 7.5 HIGH
Adjacent 		huawei ws331a_router_firmware The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allows remote attackers to bypass authentication and obtain administrative access by sending "special … CWE-287
Improper Authentication 		CVE-2016-6159 2024-11-21 11:55 2016-09-21 Show GitHub Exploit DB Packet Storm
266799 6.1 MEDIUM
Network 		huawei ws331a_router_firmware Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrator… CWE-352
 Origin Validation Error 		CVE-2016-6158 2024-11-21 11:55 2016-09-21 Show GitHub Exploit DB Packet Storm
266800 6.5 MEDIUM
Network 		libarchive
redhat
oracle 		libarchive
enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_server_eus
enterpr… 		Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file. CWE-190
 Integer Overflow or Wraparound 		CVE-2016-5844 2024-11-21 11:55 2016-09-21 Show GitHub Exploit DB Packet Storm