Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253691 7.2 危険 VMware - 複数の VMware 製品の仮想マシン通信インターフェイスにおける権限昇格の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1147 2010-03-24 12:21 2009-04-3 Show GitHub Exploit DB Packet Storm
253692 4.9 警告 VMware - 複数の VMware 製品の ioctl におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1146 2010-03-23 14:11 2010-04-3 Show GitHub Exploit DB Packet Storm
253693 6.8 警告 VMware - 複数の VMware 製品の VNnc コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0910 2010-03-23 14:11 2010-04-3 Show GitHub Exploit DB Packet Storm
253694 9.3 危険 VMware - 複数の VMware 製品の VNnc コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0909 2010-03-23 14:10 2010-04-3 Show GitHub Exploit DB Packet Storm
253695 6.4 警告 VMware - VMware ACE の ACE 共有フォルダ実装における無効にされた共有フォルダを有効にされる脆弱性 CWE-noinfo
情報不足 		CVE-2009-0908 2010-03-23 14:10 2010-04-3 Show GitHub Exploit DB Packet Storm
253696 2.1 注意 VMware - 複数の VMware 製品の VI Client におけるパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-0518 2010-03-23 14:10 2010-04-3 Show GitHub Exploit DB Packet Storm
253697 4.4 警告 KVM
レッドハット		 - KVM の x86 エミュレータにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0419 2010-03-23 14:09 2010-03-1 Show GitHub Exploit DB Packet Storm
253698 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0263 2010-03-19 10:28 2010-03-9 Show GitHub Exploit DB Packet Storm
253699 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0262 2010-03-19 10:28 2010-03-9 Show GitHub Exploit DB Packet Storm
253700 9.3 危険 マイクロソフト - 複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0261 2010-03-19 10:28 2010-03-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266021 7.5 HIGH
Network 		moxa edr-g903_firmware Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2016-0876 2024-11-21 11:42 2016-05-31 Show GitHub Exploit DB Packet Storm
266022 7.5 HIGH
Network 		moxa edr-g903_firmware Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2016-0875 2024-11-21 11:42 2016-05-31 Show GitHub Exploit DB Packet Storm
266023 5.9 MEDIUM
Network 		emc isilon_onefs
isilonsd_edge_onefs 		EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allow… CWE-254
 7PK - Security Features 		CVE-2016-0907 2024-11-21 11:42 2016-05-30 Show GitHub Exploit DB Packet Storm
266024 9.8 CRITICAL
Network 		mozilla
apple
suse
opensuse
canonical
libexpat_project
debian
mcafee
python 		firefox
mac_os_x
linux_enterprise_server
studio_onsite
linux_enterprise_software_development_kit
linux_enterprise_debuginfo
leap
linux_enterprise_desktop
ubuntu_linux
libex… 		Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-0718 2024-11-21 11:42 2016-05-27 Show GitHub Exploit DB Packet Storm
266025 4.9 MEDIUM
Network 		apache ambari The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration. CWE-284
Improper Access Control 		CVE-2016-0731 2024-11-21 11:42 2016-05-18 Show GitHub Exploit DB Packet Storm
266026 3.3 LOW
Local 		apache ambari The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive infor… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0707 2024-11-21 11:42 2016-05-18 Show GitHub Exploit DB Packet Storm
266027 5.3 MEDIUM
Network 		emc rsa_authentication_manager CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified … NVD-CWE-Other
CVE-2016-0902 2024-11-21 11:42 2016-05-7 Show GitHub Exploit DB Packet Storm
266028 6.1 MEDIUM
Network 		emc rsa_authentication_manager Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulne… CWE-79
Cross-site Scripting 		CVE-2016-0901 2024-11-21 11:42 2016-05-7 Show GitHub Exploit DB Packet Storm
266029 6.1 MEDIUM
Network 		emc rsa_authentication_manager Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulne… CWE-79
Cross-site Scripting 		CVE-2016-0900 2024-11-21 11:42 2016-05-7 Show GitHub Exploit DB Packet Storm
266030 4.3 MEDIUM
Network 		emc rsa_data_loss_prevention EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity. CWE-20
 Improper Input Validation  		CVE-2016-0895 2024-11-21 11:42 2016-05-4 Show GitHub Exploit DB Packet Storm