Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254441	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

254442	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258041	6.1	MEDIUM Network	spip	spip	SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/puce_statut.php involving the `$id` parameter, as demonstrated by a /ecrire/?exec=puce_statut URL.	CWE-79 Cross-site Scripting	CVE-2016-9997	2024-11-21 12:02	2016-12-17	Show	GitHub Exploit DB Packet Storm

258042	6.5	MEDIUM Network	apport_project	apport	An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be executed if a user click…	CWE-284 Improper Access Control	CVE-2016-9951	2024-11-21 12:02	2016-12-17	Show	GitHub Exploit DB Packet Storm

258043	7.8	HIGH Local	apport_project canonical	apport ubuntu_linux	An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package sp…	CWE-22 Path Traversal	CVE-2016-9950	2024-11-21 12:02	2016-12-17	Show	GitHub Exploit DB Packet Storm

258044	7.8	HIGH Local	apport_project canonical	apport ubuntu_linux	An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers t…	CWE-94 Code Injection	CVE-2016-9949	2024-11-21 12:02	2016-12-17	Show	GitHub Exploit DB Packet Storm

258045	9.8	CRITICAL Network	samsung	samsung_mobile	Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily re…	CWE-388 7PK - Errors	CVE-2016-9967	2024-11-21 12:02	2016-12-16	Show	GitHub Exploit DB Packet Storm

258046	9.8	CRITICAL Network	samsung	samsung_mobile	Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily re…	CWE-388 7PK - Errors	CVE-2016-9966	2024-11-21 12:02	2016-12-16	Show	GitHub Exploit DB Packet Storm

258047	9.8	CRITICAL Network	samsung	samsung_mobile	Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily re…	CWE-388 7PK - Errors	CVE-2016-9965	2024-11-21 12:02	2016-12-16	Show	GitHub Exploit DB Packet Storm

258048	6.5	MEDIUM Network	bottlepy debian	bottle debian_linux	redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.	CWE-93 CRLF Injection	CVE-2016-9964	2024-11-21 12:02	2016-12-16	Show	GitHub Exploit DB Packet Storm

258049	5.3	MEDIUM Network	digium	asterisk certified_asterisk	An issue was discovered in Asterisk Open Source 11.x before 11.25.1, 13.x before 13.13.1, and 14.x before 14.2.1 and Certified Asterisk 11.x before 11.6-cert16 and 13.x before 13.8-cert4. The chan_si…	CWE-285 Improper Authorization	CVE-2016-9938	2024-11-21 12:02	2016-12-13	Show	GitHub Exploit DB Packet Storm

258050	7.5	HIGH Network	digium	asterisk	An issue was discovered in Asterisk Open Source 13.12.x and 13.13.x before 13.13.1 and 14.x before 14.2.1. If an SDP offer or answer is received with the Opus codec and with the format parameters sep…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-9937	2024-11-21 12:02	2016-12-13	Show	GitHub Exploit DB Packet Storm