Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253731 6.8 警告 アップル
サイバートラスト株式会社
Python Software Foundation
サン・マイクロシステムズ
レッドハット		 - Python の imageop.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-1679 2010-01-19 15:48 2008-04-22 Show GitHub Exploit DB Packet Storm
253732 5.8 警告 アップル
サイバートラスト株式会社
Python Software Foundation
サン・マイクロシステムズ
レッドハット		 - Python の imageop モジュールにおける複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2007-4965 2010-01-19 15:47 2007-09-18 Show GitHub Exploit DB Packet Storm
253733 7.5 危険 アップル - Mac OS X 用の Java における任意のコードを実行される脆弱性 CWE-310
暗号の問題 		CVE-2009-2843 2010-01-18 12:22 2009-12-3 Show GitHub Exploit DB Packet Storm
253734 6.8 警告 アップル
GNU Project
サン・マイクロシステムズ
サイバートラスト株式会社
レッドハット		 - GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4131 2010-01-18 12:21 2007-08-23 Show GitHub Exploit DB Packet Storm
253735 4.6 警告 IBM - IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4150 2010-01-15 14:10 2009-12-2 Show GitHub Exploit DB Packet Storm
253736 2.1 注意 サン・マイクロシステムズ - Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4080 2010-01-15 14:10 2009-11-24 Show GitHub Exploit DB Packet Storm
253737 5 警告 サン・マイクロシステムズ - Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4075 2010-01-15 14:09 2009-11-23 Show GitHub Exploit DB Packet Storm
253738 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
253739 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
253740 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257001 9.8 CRITICAL
Network 		gstreamer
redhat
debian 		gstreamer
enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9635 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
257002 9.8 CRITICAL
Network 		gstreamer
redhat
debian 		gstreamer
enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9634 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
257003 7.8 HIGH
Local 		libtiff
opensuse
debian 		libtiff
opensuse
debian_linux 		The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIF… CWE-787
 Out-of-bounds Write 		CVE-2016-9453 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
257004 7.5 HIGH
Network 		libtiff
opensuse 		libtiff
opensuse 		The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_… CWE-476
 NULL Pointer Dereference 		CVE-2016-9448 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
257005 7.8 HIGH
Local 		gstreamer_project gstreamer The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music f… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2016-9447 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257006 7.5 HIGH
Network 		gstreamer_project
redhat
fedoraproject 		gstreamer
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_eus
enterprise_linux_server_tus
fedora 		The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that… CWE-665
 Improper Initialization 		CVE-2016-9446 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257007 7.5 HIGH
Network 		gstreamer_project gstreamer Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow. CWE-190
 Integer Overflow or Wraparound 		CVE-2016-9445 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257008 5.5 MEDIUM
Local 		gnu
debian
redhat 		bash
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise_linux_server_tus 		popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. CWE-416
 Use After Free 		CVE-2016-9401 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257009 7.8 HIGH
Local 		citrix
xen 		xenserver
xen 		The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9386 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
257010 6.0 MEDIUM
Local 		xen
citrix 		xen
xenserver 		The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical add… CWE-20
 Improper Input Validation  		CVE-2016-9385 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm