Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254471 7.2 危険 VMware - 複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4297 2010-12-27 15:40 2010-12-2 Show GitHub Exploit DB Packet Storm
254472 7.2 危険 VMware - 複数の VMware 製品の vmware-mount における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4296 2010-12-27 15:38 2010-12-2 Show GitHub Exploit DB Packet Storm
254473 6.9 警告 VMware - 複数の VMware 製品の vmware-mount における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2010-4295 2010-12-27 15:36 2010-12-2 Show GitHub Exploit DB Packet Storm
254474 9.3 危険 VMware - 複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4294 2010-12-27 15:33 2010-12-2 Show GitHub Exploit DB Packet Storm
254475 2.1 注意 アップル - Windows 上で稼働する Apple QuickTime における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0530 2010-12-27 15:07 2010-12-9 Show GitHub Exploit DB Packet Storm
254476 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1508 2010-12-27 15:06 2010-12-9 Show GitHub Exploit DB Packet Storm
254477 9.3 危険 アップル - Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3800 2010-12-27 14:59 2010-12-9 Show GitHub Exploit DB Packet Storm
254478 9.3 危険 マイクロソフト - Microsoft Internet Explorer における無効なフラグ参照に起因する脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3962 2010-12-27 14:36 2010-11-4 Show GitHub Exploit DB Packet Storm
254479 10 危険 CA Technologies - CA PSFormX および CA WebScan ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-20
CWE-noinfo
CVE-2010-2193 2010-12-27 11:49 2010-06-8 Show GitHub Exploit DB Packet Storm
254480 2.6 注意 CA Technologies - CA eHealth Performance Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0640 2010-12-27 11:44 2010-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265191 5.5 MEDIUM
Network 		pulsesecure
ivanti 		pulse_connect_secure
connect_secure 		Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote… CWE-79
Cross-site Scripting 		CVE-2016-4790 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
265192 6.1 MEDIUM
Network 		pulsesecure
ivanti 		pulse_connect_secure
connect_secure 		Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, a… CWE-79
Cross-site Scripting 		CVE-2016-4789 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
265193 5.8 MEDIUM
Network 		ivanti
pulsesecure 		connect_secure
pulse_connect_secure 		Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via unknown vectors. NVD-CWE-noinfo
CVE-2016-4788 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
265194 10.0 CRITICAL
Network 		ivanti
pulsesecure 		connect_secure
pulse_connect_secure 		Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified direct… NVD-CWE-noinfo
CVE-2016-4787 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
265195 7.5 HIGH
Network 		pulsesecure
ivanti 		pulse_connect_secure
connect_secure 		Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. NVD-CWE-noinfo
CVE-2016-4786 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
265196 6.1 MEDIUM
Network 		huawei ath_firmware
ath
rio_firmware
plk_firmware
cherryplus_firmware
cherryplus 		Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 befo… CWE-79
Cross-site Scripting 		CVE-2016-4575 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
265197 6.1 MEDIUM
Network 		lenovo shareit Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universa… CWE-79
Cross-site Scripting 		CVE-2016-4783 2024-11-21 11:52 2016-05-24 Show GitHub Exploit DB Packet Storm
265198 8.8 HIGH
Network 		lenovo shareit Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack." CWE-20
 Improper Input Validation  		CVE-2016-4782 2024-11-21 11:52 2016-05-24 Show GitHub Exploit DB Packet Storm
265199 7.5 HIGH
Adjacent 		huawei usg9500_firmware
ngfw_module_firmware
secospace_usg6300_firmware
secospace_usg6600_firmware
secospace_usg6500_firmware 		Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4577 2024-11-21 11:52 2016-05-24 Show GitHub Exploit DB Packet Storm
265200 9.8 CRITICAL
Network 		huawei nip6300_firmware
secospace_usg6500_firmware
secospace_antiddos8000_firmware
usg9500_firmware
secospace_usg6300_firmware
ngfw_module_firmware
secospace_usg6600_firmware
nip6600_fi… 		Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS80… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4576 2024-11-21 11:52 2016-05-24 Show GitHub Exploit DB Packet Storm