Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254411 6.8 警告 アップル
GNU Project
サン・マイクロシステムズ
サイバートラスト株式会社
レッドハット		 - GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4131 2010-01-18 12:21 2007-08-23 Show GitHub Exploit DB Packet Storm
254412 4.6 警告 IBM - IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4150 2010-01-15 14:10 2009-12-2 Show GitHub Exploit DB Packet Storm
254413 2.1 注意 サン・マイクロシステムズ - Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4080 2010-01-15 14:10 2009-11-24 Show GitHub Exploit DB Packet Storm
254414 5 警告 サン・マイクロシステムズ - Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4075 2010-01-15 14:09 2009-11-23 Show GitHub Exploit DB Packet Storm
254415 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
254416 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
254417 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
254418 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
254419 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
254420 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258061 6.5 MEDIUM
Network 		redhat
xmlsoft 		jboss_core_services
libxml2 		libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this … CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-9596 2024-11-21 12:01 2018-08-17 Show GitHub Exploit DB Packet Storm
258062 7.8 HIGH
Local 		redhat
jasper_project
oracle 		enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux_server_eus
jasper
outside_i… 		An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input. CWE-125
Out-of-bounds Read 		CVE-2016-9583 2024-11-21 12:01 2018-08-2 Show GitHub Exploit DB Packet Storm
258063 8.8 HIGH
Network 		uclouvain openjpeg An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow. - CVE-2016-9580 2024-11-21 12:01 2018-08-2 Show GitHub Exploit DB Packet Storm
258064 7.5 HIGH
Network 		redhat enterprise_linux_desktop
enterprise_linux_workstation
ceph_storage_osd
ceph_storage_mon
enterprise_linux_server
ceph_storage 		A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw … - CVE-2016-9579 2024-11-21 12:01 2018-08-2 Show GitHub Exploit DB Packet Storm
258065 6.5 MEDIUM
Network 		uclouvain
debian 		openjpeg
debian_linux 		A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openj… - CVE-2016-9572 2024-11-21 12:01 2018-08-2 Show GitHub Exploit DB Packet Storm
258066 8.8 HIGH
Network 		uclouvain openjpeg An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2. - CVE-2016-9581 2024-11-21 12:01 2018-08-1 Show GitHub Exploit DB Packet Storm
258067 8.1 HIGH
Network 		uclouvain
redhat
debian 		openjpeg
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
debian_linux 		An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, pote… - CVE-2016-9573 2024-11-21 12:01 2018-08-1 Show GitHub Exploit DB Packet Storm
258068 7.5 HIGH
Network 		canonical
xmlsoft
debian
hp
opensuse 		ubuntu_linux
libxml2
debian_linux
icewall_file_manager
icewall_federation_agent
leap 		It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service att… - CVE-2016-9597 2024-11-21 12:01 2018-07-30 Show GitHub Exploit DB Packet Storm
258069 9.9 CRITICAL
Network 		qemu
redhat
citrix
debian 		qemu
enterprise_linux_desktop
xenserver
enterprise_linux_workstation
openstack
enterprise_linux_server
debian_linux
enterprise_linux_server_aus
enterprise_linux_server_eus 		A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9603 2024-11-21 12:01 2018-07-28 Show GitHub Exploit DB Packet Storm
258070 7.5 HIGH
Network 		spice_project
redhat
debian 		spice
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
debian_linux
enterprise_linux_server_aus
enterprise_linux_server_eus 		A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to … CWE-20
 Improper Input Validation  		CVE-2016-9578 2024-11-21 12:01 2018-07-28 Show GitHub Exploit DB Packet Storm