Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251421	6.8	警告	IBM	-	IBM PNMSS アプライアンスの LMI におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-0153	2012-03-27 18:42	2010-09-14	Show	GitHub Exploit DB Packet Storm

251422	4.3	警告	IBM	-	IBM PNMSS アプライアンスの LMI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0152	2012-03-27 18:42	2010-09-14	Show	GitHub Exploit DB Packet Storm

251423	7.5	危険	シマンテック	-	Symantec SEP の fw_charts.php におけるレポート生成の制限を回避する脆弱性	CWE-20 不適切な入力確認	CVE-2010-0114	2012-03-27 18:42	2010-12-15	Show	GitHub Exploit DB Packet Storm

251424	7.5	危険	シマンテック	-	Symantec IM Manager の管理者インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0112	2012-03-27 18:42	2010-10-27	Show	GitHub Exploit DB Packet Storm

251425	5	警告	mhonarc	-	MHonArc におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1677	2012-03-27 18:42	2011-01-3	Show	GitHub Exploit DB Packet Storm

251426	5.5	警告	レッドハット	-	RHN Satellite におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1171	2012-03-27 18:42	2011-04-11	Show	GitHub Exploit DB Packet Storm

251427	5.8	警告	zeacom	-	Zeacom Chat Server におけるセッションをハイジャックされるの脆弱性	CWE-310 暗号の問題	CVE-2010-0217	2012-03-27 18:42	2011-05-20	Show	GitHub Exploit DB Packet Storm

251428	5	警告	inventivetec	-	MediaCAST の authenticate_ad_setup_finished.cfm におけるユーザ名および平文のパスワードを発見される脆弱性	CWE-310 暗号の問題	CVE-2010-0216	2012-03-27 18:42	2011-05-10	Show	GitHub Exploit DB Packet Storm

251429	7.5	危険	シマンテック	-	Symantec Web Gateway の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0115	2012-03-27 18:42	2011-01-12	Show	GitHub Exploit DB Packet Storm

251430	7.1	危険	ヒューレット・パッカード	-	Palm Pre WebOS における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-5097	2012-03-27 18:42	2011-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265681	3.3	LOW Local	foxitsoftware	reader	A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory …	CWE-125 Out-of-bounds Read	CVE-2016-8334	2024-11-21 11:59	2017-01-7	Show	GitHub Exploit DB Packet Storm

265682	9.8	CRITICAL Network	libgd	libgd	Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-8670	2024-11-21 11:59	2017-01-5	Show	GitHub Exploit DB Packet Storm

265683	7.8	HIGH Local	imagemagick debian	imagemagick debian_linux	An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular c…	CWE-787 Out-of-bounds Write	CVE-2016-8707	2024-11-21 11:59	2016-12-24	Show	GitHub Exploit DB Packet Storm

265684	5.5	MEDIUM Local	ffmpeg	ffmpeg	The gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service (assert fault) via a crafted AVI file.	CWE-20 Improper Input Validation	CVE-2016-8595	2024-11-21 11:59	2016-12-23	Show	GitHub Exploit DB Packet Storm

265685	8.8	HIGH Local	joyent	smartos	An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when de…	CWE-190 Integer Overflow or Wraparound	CVE-2016-8733	2024-11-21 11:59	2016-12-15	Show	GitHub Exploit DB Packet Storm

265686	7.8	HIGH Local	linux canonical	linux_kernel ubuntu_linux	Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capabilit…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2016-8655	2024-11-21 11:59	2016-12-8	Show	GitHub Exploit DB Packet Storm

265687	7.5	HIGH Network	apache	http_server	The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to ca…	CWE-20 CWE-399 Improper Input Validation Resource Management Errors	CVE-2016-8740	2024-11-21 11:59	2016-12-6	Show	GitHub Exploit DB Packet Storm

265688	4.4	MEDIUM Local	lenovo	thinkpad_10_ella_2_bios thinkpad_11e_beema_bios thinkpad_11e_braswell_bios thinkpad_11e_broadwell_bios thinkpad_11e_skylake_bios thinkpad_13e_bios thinkpad_e450_bios thinkpad_e45…	A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mo…	CWE-284 Improper Access Control	CVE-2016-8222	2024-11-21 11:59	2016-12-1	Show	GitHub Exploit DB Packet Storm

265689	4.4	MEDIUM Local	lenovo	bios notebook_110_14ibr_bios notebook_110_15ibr_bios notebook_b70_80_bios notebook_e31_80_bios notebook_e40_80_bios notebook_e41_80_bios notebook_e51_80_bios notebook_g40_80_b…	A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Managem…	CWE-310 Cryptographic Issues	CVE-2016-8224	2024-11-21 11:59	2016-11-30	Show	GitHub Exploit DB Packet Storm

265690	7.8	HIGH Local	lenovo	system_interface_foundation	During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with loca…	CWE-284 Improper Access Control	CVE-2016-8223	2024-11-21 11:59	2016-11-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed