Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252001 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品の FRAMESET 要素の実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-2765 2011-05-16 11:07 2010-09-7 Show GitHub Exploit DB Packet Storm
252002 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品の nsTreeSelection 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2760 2011-05-16 11:05 2010-09-7 Show GitHub Exploit DB Packet Storm
252003 3.7 注意 オラクル - Oracle Solaris における LOFS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0839 2011-05-13 11:37 2011-04-19 Show GitHub Exploit DB Packet Storm
252004 4.9 警告 オラクル - Oracle Solaris における Kernel/SPARC の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0829 2011-05-13 11:36 2011-04-19 Show GitHub Exploit DB Packet Storm
252005 4.3 警告 オラクル - Oracle PeopleSoft Enterprise の Application Portal における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0828 2011-05-13 11:35 2011-04-19 Show GitHub Exploit DB Packet Storm
252006 3.5 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0827 2011-05-13 11:34 2011-04-19 Show GitHub Exploit DB Packet Storm
252007 3.5 注意 オラクル - Oracle PeopleSoft Enterprise の Application Portal における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0826 2011-05-13 11:34 2011-04-19 Show GitHub Exploit DB Packet Storm
252008 6.8 警告 オラクル - Oracle JD Edwards EnterpriseOne Tools および OneWorld Tools における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0825 2011-05-13 11:33 2011-04-19 Show GitHub Exploit DB Packet Storm
252009 6.4 警告 オラクル - Oracle JD Edwards EnterpriseOne Tools および OneWorld Tools における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0824 2011-05-13 11:27 2011-04-19 Show GitHub Exploit DB Packet Storm
252010 5 警告 オラクル - Oracle JD Edwards EnterpriseOne Tools および OneWorld Tools における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0823 2011-05-13 11:26 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266591 5.3 MEDIUM
Network 		salesforce
ibm
redhat 		tough-cookie
api_connect
openshift_container_platform 		NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable … CWE-20
 Improper Input Validation  		CVE-2016-1000232 2024-11-21 11:43 2018-09-6 Show GitHub Exploit DB Packet Storm
266592 7.4 HIGH
Network 		bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider. CWE-310
Cryptographic Issues 		CVE-2016-1000352 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
266593 3.7 LOW
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other pa… CWE-320
 Key Management Errors 		CVE-2016-1000346 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
266594 5.9 MEDIUM
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed,… CWE-361
 7PK - Time and State 		CVE-2016-1000345 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
266595 7.4 HIGH
Network 		bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider. CWE-310
Cryptographic Issues 		CVE-2016-1000344 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
266596 7.5 HIGH
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initial… CWE-310
Cryptographic Issues 		CVE-2016-1000343 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
266597 7.5 HIGH
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2016-1000342 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
266598 5.9 MEDIUM
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of… CWE-361
 7PK - Time and State 		CVE-2016-1000341 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
266599 7.5 HIGH
Network 		bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.r… CWE-19
 Data Processing Errors 		CVE-2016-1000340 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
266600 5.3 MEDIUM
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table driven approach used in the algorithm it turns out that if … CWE-310
Cryptographic Issues 		CVE-2016-1000339 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm