Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254421	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の atas32.dll におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2878	2011-06-17 11:23	2009-12-16	Show	GitHub Exploit DB Packet Storm

254422	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の ataudio.dll におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2877	2011-06-17 11:18	2009-12-16	Show	GitHub Exploit DB Packet Storm

254423	6.3	警告	VMware	-	複数の VMware 製品の HGFS におけるゲスト OS 上の任意のファイルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2145	2011-06-17 10:59	2011-06-2	Show	GitHub Exploit DB Packet Storm

254424	6.9	警告	VMware	-	複数の VMware 製品の HGFS におけるゲスト OS 上の権限を取得される脆弱性	CWE-362 競合状態	CVE-2011-1787	2011-06-17 10:58	2011-06-2	Show	GitHub Exploit DB Packet Storm

254425	2.1	注意	VMware	-	複数の Vmware 製品の HGFS におけるホスト OS 上のファイルなどの存在有無を特定される脆弱性	CWE-200 情報漏えい	CVE-2011-2146	2011-06-17 10:56	2011-06-2	Show	GitHub Exploit DB Packet Storm

254426	4.3	警告	アドビシステムズレッドハット	-	Adobe Flash Player におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2107	2011-06-17 10:54	2011-06-5	Show	GitHub Exploit DB Packet Storm

254427	-	-	Rockwell Automation	-	RSLinx Classic EDS Hardware Installation Tool にバッファオーバーフローの脆弱性	-	-	2011-06-17 10:51	2011-05-31	Show	GitHub Exploit DB Packet Storm

254428	9.3	危険	ジャストシステム	-	一太郎シリーズにおける任意のコードが実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-1331	2011-06-16 12:03	2011-06-16	Show	GitHub Exploit DB Packet Storm

254429	6.5	警告	IBM	-	IBM DB2 における non-DDL ステートメントを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1846	2011-06-16 11:21	2011-04-26	Show	GitHub Exploit DB Packet Storm

254430	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の atas32.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2875	2011-06-16 10:38	2009-12-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264561	9.8	CRITICAL Network	ibm	system_storage_ts3100-ts3200_tape_library	IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network, to change a user's password and gain remote access to the system.	CWE-284 Improper Access Control	CVE-2016-9005	2024-11-21 12:00	2017-02-9	Show	GitHub Exploit DB Packet Storm

264562	9.8	CRITICAL Network	ibm	dashdb_local	IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database.	CWE-798 Use of Hard-coded Credentials	CVE-2016-8954	2024-11-21 12:00	2017-02-9	Show	GitHub Exploit DB Packet Storm

264563	7.5	HIGH Network	fedoraproject artifex	fedora mujs	Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (applicatio…	CWE-190 Integer Overflow or Wraparound	CVE-2016-9108	2024-11-21 12:00	2017-02-4	Show	GitHub Exploit DB Packet Storm

264564	3.3	LOW Local	webmproject fedoraproject	libwebp fedora	Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.	CWE-190 Integer Overflow or Wraparound	CVE-2016-9085	2024-11-21 12:00	2017-02-4	Show	GitHub Exploit DB Packet Storm

264565	5.5	MEDIUM Local	cairographics	cairo	Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.	CWE-190 Integer Overflow or Wraparound	CVE-2016-9082	2024-11-21 12:00	2017-02-4	Show	GitHub Exploit DB Packet Storm

264566	7.5	HIGH Network	ibm	urbancode_deploy	IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent.	CWE-284 Improper Access Control	CVE-2016-9008	2024-11-21 12:00	2017-02-2	Show	GitHub Exploit DB Packet Storm

264567	6.1	MEDIUM Network	ibm	infosphere_information_server_on_cloud infosphere_datastage	IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to nav…	CWE-79 Cross-site Scripting	CVE-2016-9000	2024-11-21 12:00	2017-02-2	Show	GitHub Exploit DB Packet Storm

264568	5.4	MEDIUM Network	ibm	infosphere_information_server infosphere_information_server_on_cloud infosphere_datastage	IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious C…	CWE-79 Cross-site Scripting	CVE-2016-8999	2024-11-21 12:00	2017-02-2	Show	GitHub Exploit DB Packet Storm

264569	5.3	MEDIUM Network	ibm	infosphere_datastage	IBM InfoSphere Information Server stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer hea…	CWE-200 Information Exposure	CVE-2016-8982	2024-11-21 12:00	2017-02-2	Show	GitHub Exploit DB Packet Storm

264570	5.3	MEDIUM Network	ibm	license_metric_tool bigfix_inventory	IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.	CWE-200 Information Exposure	CVE-2016-8977	2024-11-21 12:00	2017-02-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed