Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253681 7.6 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3986 2010-01-29 09:54 2009-12-15 Show GitHub Exploit DB Packet Storm
253682 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey におけるコンテンツを偽装される脆弱性 CWE-Other
その他 		CVE-2009-3985 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
253683 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における http URL または file URL の SSL インジケータを偽装される脆弱性 CWE-Other
その他 		CVE-2009-3984 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
253684 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における認証されたリクエストを任意のアプリケーションに送信される脆弱性 CWE-Other
その他 		CVE-2009-3983 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
253685 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の libtheora における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-3389 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
253686 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の liboggplay における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3388 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
253687 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3982 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
253688 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3981 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
253689 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3980 2010-01-28 12:15 2009-12-15 Show GitHub Exploit DB Packet Storm
253690 10 危険 アドビシステムズ - Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3792 2010-01-27 10:02 2009-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257171 7.8 HIGH
Local 		libtiff
opensuse
debian 		libtiff
opensuse
debian_linux 		The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIF… CWE-787
 Out-of-bounds Write 		CVE-2016-9453 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
257172 7.5 HIGH
Network 		libtiff
opensuse 		libtiff
opensuse 		The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_… CWE-476
 NULL Pointer Dereference 		CVE-2016-9448 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
257173 7.8 HIGH
Local 		gstreamer_project gstreamer The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music f… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2016-9447 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257174 7.5 HIGH
Network 		gstreamer_project
redhat
fedoraproject 		gstreamer
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_eus
enterprise_linux_server_tus
fedora 		The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that… CWE-665
 Improper Initialization 		CVE-2016-9446 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257175 7.5 HIGH
Network 		gstreamer_project gstreamer Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow. CWE-190
 Integer Overflow or Wraparound 		CVE-2016-9445 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257176 5.5 MEDIUM
Local 		gnu
debian
redhat 		bash
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise_linux_server_tus 		popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. CWE-416
 Use After Free 		CVE-2016-9401 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257177 7.8 HIGH
Local 		citrix
xen 		xenserver
xen 		The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9386 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257178 6.0 MEDIUM
Local 		xen
citrix 		xen
xenserver 		The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical add… CWE-20
 Improper Input Validation  		CVE-2016-9385 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257179 8.8 HIGH
Local 		xen
citrix 		xen
xenserver 		Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service (host crash), or execute … CWE-20
 Improper Input Validation  		CVE-2016-9383 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257180 7.8 HIGH
Local 		xen
citrix 		xen
xenserver 		Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a gue… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9382 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm