Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252581 5 警告 オラクル - Oracle Fusion Middleware の OID コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3501 2010-11-1 15:39 2010-10-12 Show GitHub Exploit DB Packet Storm
252582 1 注意 オラクル - 複数の Oracle 製品の Perl コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2389 2010-11-1 15:38 2010-10-12 Show GitHub Exploit DB Packet Storm
252583 3.6 注意 オラクル - Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2391 2010-11-1 15:37 2010-10-12 Show GitHub Exploit DB Packet Storm
252584 4.3 警告 オラクル - Oracle Database Server の XDK コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2407 2010-11-1 15:37 2010-10-12 Show GitHub Exploit DB Packet Storm
252585 6.8 警告 Vim - GVim における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3914 2010-11-1 12:00 2010-11-1 Show GitHub Exploit DB Packet Storm
252586 9.3 危険 オラクル - Oracle Siebel Option Pack for IE の ActiveX コントロールのメモリ初期化処理に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3737 2010-10-29 16:43 2010-08-9 Show GitHub Exploit DB Packet Storm
252587 4.6 警告 オラクル - Oracle Database Server の Job Queue コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2411 2010-10-29 16:35 2010-10-12 Show GitHub Exploit DB Packet Storm
252588 4.9 警告 オラクル - Oracle Database Server の Change Data Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2415 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
252589 5.5 警告 オラクル - Oracle Database Server の OLAP コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2412 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
252590 6.5 警告 オラクル - Oracle Database Server の Java Virtual Machine コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2419 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257531 9.9 CRITICAL
Network 		qemu
redhat
citrix
debian 		qemu
enterprise_linux_desktop
xenserver
enterprise_linux_workstation
openstack
enterprise_linux_server
debian_linux
enterprise_linux_server_aus
enterprise_linux_server_eus 		A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9603 2024-11-21 12:01 2018-07-28 Show GitHub Exploit DB Packet Storm
257532 7.5 HIGH
Network 		spice_project
redhat
debian 		spice
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
debian_linux
enterprise_linux_server_aus
enterprise_linux_server_eus 		A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to … CWE-20
 Improper Input Validation  		CVE-2016-9578 2024-11-21 12:01 2018-07-28 Show GitHub Exploit DB Packet Storm
257533 8.8 HIGH
Network 		spice_project
redhat
debian 		spice
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
debian_linux
enterprise_linux_server_aus
enterprise_linux_server_eus 		A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9577 2024-11-21 12:01 2018-07-28 Show GitHub Exploit DB Packet Storm
257534 5.5 MEDIUM
Local 		theforeman
redhat 		katello
satellite
satellite_capsule 		A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them… CWE-59
Link Following 		CVE-2016-9595 2024-11-21 12:01 2018-07-28 Show GitHub Exploit DB Packet Storm
257535 5.9 MEDIUM
Network 		mozilla network_security_services nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA. CWE-384
 Session Fixation 		CVE-2016-9574 2024-11-21 12:01 2018-07-19 Show GitHub Exploit DB Packet Storm
257536 6.1 MEDIUM
Network 		accellion ftp_server Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable … CWE-79
Cross-site Scripting 		CVE-2016-9500 2024-11-21 12:01 2018-07-14 Show GitHub Exploit DB Packet Storm
257537 5.3 MEDIUM
Network 		accellion ftp_server Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts a… CWE-200
Information Exposure 		CVE-2016-9499 2024-11-21 12:01 2018-07-14 Show GitHub Exploit DB Packet Storm
257538 8.8 HIGH
Adjacent 		hughes hn7740s_firmware
dw7000_firmware
hn7000s_firmware
hn7000sm_firmware 		Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible… CWE-287
Improper Authentication 		CVE-2016-9497 2024-11-21 12:01 2018-07-14 Show GitHub Exploit DB Packet Storm
257539 6.5 MEDIUM
Adjacent 		hughes hn7740s_firmware
dw7000_firmware
hn7000s_firmware
hn7000sm_firmware 		Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or htt… CWE-306
Missing Authentication for Critical Function 		CVE-2016-9496 2024-11-21 12:01 2018-07-14 Show GitHub Exploit DB Packet Storm
257540 8.8 HIGH
Adjacent 		hughes hn7740s_firmware
dw7000_firmware
hn7000s_firmware
hn7000sm_firmware 		Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Access to the device's default telnet port (23) can be obtained through using one of… CWE-798
 Use of Hard-coded Credentials 		CVE-2016-9495 2024-11-21 12:01 2018-07-14 Show GitHub Exploit DB Packet Storm