Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254851 5 警告 Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品の CSSLoaderImpl::DoSheetComplete 関数におけるウェブページのレンダリングを中断される脆弱性 CWE-Other
その他 		CVE-2010-0169 2010-04-6 16:50 2010-03-23 Show GitHub Exploit DB Packet Storm
254852 7.6 危険 Mozilla Foundation - Mozilla Firefox の nsDocument::MaybePreLoadImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0168 2010-04-6 16:49 2010-03-23 Show GitHub Exploit DB Packet Storm
254853 9.3 危険 Mozilla Foundation - Mozilla Firefox の imgContainer::InternalAddFrameHelper 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0164 2010-04-6 16:49 2010-03-23 Show GitHub Exploit DB Packet Storm
254854 4.3 警告 Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0171 2010-04-5 14:54 2010-03-23 Show GitHub Exploit DB Packet Storm
254855 4.3 警告 Mozilla Foundation - Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0170 2010-04-5 14:53 2010-03-23 Show GitHub Exploit DB Packet Storm
254856 7.5 危険 Heartlogic - HL-SiteManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1331 2010-04-2 15:02 2010-04-2 Show GitHub Exploit DB Packet Storm
254857 9.3 危険 Mozilla Foundation - Mozilla Firefox の Web Open Fonts Format デコーダ における整数オーバーフローの脆弱性 CWE-noinfo
情報不足 		CVE-2010-1028 2010-04-2 14:05 2010-03-19 Show GitHub Exploit DB Packet Storm
254858 5 警告 富士通
アクセラテクノロジ		 - Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性 CWE-200
情報漏えい 		- 2010-04-2 14:05 2010-03-10 Show GitHub Exploit DB Packet Storm
254859 1.9 注意 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3556 2010-04-2 14:02 2010-01-19 Show GitHub Exploit DB Packet Storm
254860 10 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2009-4538 2010-04-2 14:02 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265561 9.4 CRITICAL
Network 		meteocontrol web\'log_pro
web\'log_pro_unlimited
web\'log_basic_100
web\'log_light 		Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify dat… CWE-254
 7PK - Security Features 		CVE-2016-2296 2024-11-21 11:48 2016-05-15 Show GitHub Exploit DB Packet Storm
265562 6.5 MEDIUM
Network 		openafs
debian 		openafs
debian_linux 		The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions and create arbitrary groups … CWE-284
Improper Access Control 		CVE-2016-2860 2024-11-21 11:48 2016-05-14 Show GitHub Exploit DB Packet Storm
265563 7.5 HIGH
Network 		fedoraproject
botan_project 		fedora
botan 		Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2016-2850 2024-11-21 11:48 2016-05-13 Show GitHub Exploit DB Packet Storm
265564 7.5 HIGH
Network 		debian
fedoraproject
botan_project 		debian_linux
fedora
botan 		Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret ke… CWE-200
Information Exposure 		CVE-2016-2849 2024-11-21 11:48 2016-05-13 Show GitHub Exploit DB Packet Storm
265565 9.8 CRITICAL
Network 		botan_project botan Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (memory overwrite and crash) or execute arbitrary code v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2196 2024-11-21 11:48 2016-05-13 Show GitHub Exploit DB Packet Storm
265566 9.8 CRITICAL
Network 		botan_project
debian 		botan
debian_linux 		Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point,… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2195 2024-11-21 11:48 2016-05-13 Show GitHub Exploit DB Packet Storm
265567 7.5 HIGH
Network 		debian
botan_project 		debian_linux
botan 		The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (infinite loop) via unspecified input to the OS2ECP function, related to a c… CWE-20
 Improper Input Validation  		CVE-2016-2194 2024-11-21 11:48 2016-05-13 Show GitHub Exploit DB Packet Storm
265568 7.0 HIGH
Local 		google android OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspec… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2462 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
265569 7.0 HIGH
Local 		google android OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles resets of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspeci… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2461 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
265570 5.5 MEDIUM
Local 		google android mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive info… CWE-200
Information Exposure 		CVE-2016-2460 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm