Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255141	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 8 における権限昇格の脆弱性	CWE-Other その他	CVE-2011-0038	2011-03-4 14:53	2011-02-8	Show	GitHub Exploit DB Packet Storm

255142	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0036	2011-03-4 14:50	2011-02-8	Show	GitHub Exploit DB Packet Storm

255143	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0035	2011-03-4 14:30	2011-02-8	Show	GitHub Exploit DB Packet Storm

255144	5	警告	日立	-	Hitachi Tuning Manager Software におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-03-4 14:24	2011-02-7	Show	GitHub Exploit DB Packet Storm

255145	10	危険	IntelliCom Innovation AB	-	IntelliCom NetBiter NB100 および NB200 プラットフォームに複数の脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-4733	2011-03-4 14:21	2011-02-7	Show	GitHub Exploit DB Packet Storm

255146	4.3	警告	IBM サイバートラスト株式会社ヒューレット・パッカードターボリナックス OpenSSL Project VMware レッドハット	-	OpenSSL の kssl_keytab_is_available 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0433	2011-03-4 10:48	2010-03-24	Show	GitHub Exploit DB Packet Storm

255147	5.1	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0085	2011-03-4 10:45	2010-03-30	Show	GitHub Exploit DB Packet Storm

255148	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0084	2011-03-4 10:44	2010-03-30	Show	GitHub Exploit DB Packet Storm

255149	5.1	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の HotSpot Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0082	2011-03-4 10:43	2010-03-30	Show	GitHub Exploit DB Packet Storm

255150	9	危険	マイクロソフト VMware	-	Microsoft SQL Server の insert ステートメントに関するバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0106	2011-03-4 10:39	2008-07-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264531	5.3	MEDIUM Network	bluez	bluez	In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump…	CWE-416 Use After Free	CVE-2016-9798	2024-11-21 12:01	2016-12-3	Show	GitHub Exploit DB Packet Storm

264532	5.3	MEDIUM Network	bluez	bluez	In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidu…	CWE-119 CWE-125 Incorrect Access of Indexable Resource ('Range Error') Out-of-bounds Read	CVE-2016-9797	2024-11-21 12:01	2016-12-3	Show	GitHub Exploit DB Packet Storm

264533	7.8	HIGH Local	bmc	patrol	In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-9638	2024-11-21 12:01	2016-12-3	Show	GitHub Exploit DB Packet Storm

264534	9.8	CRITICAL Network	alcatel-lucent	omnivista_8770_network_management_system	Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista i…	CWE-287 CWE-264 Improper Authentication Permissions, Privileges, and Access Controls	CVE-2016-9796	2024-11-21 12:01	2016-12-3	Show	GitHub Exploit DB Packet Storm

264535	7.5	HIGH Network	b2evolution	b2evolution	The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request.	CWE-255 Credentials Management	CVE-2016-9479	2024-11-21 12:01	2016-12-3	Show	GitHub Exploit DB Packet Storm

264536	8.6	HIGH Network	s9y	serendipity	In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status code.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2016-9752	2024-11-21 12:01	2016-12-1	Show	GitHub Exploit DB Packet Storm

264537	6.1	MEDIUM Network	piwigo	piwigo	Cross-site scripting (XSS) vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter.	CWE-79 Cross-site Scripting	CVE-2016-9751	2024-11-21 12:01	2016-12-1	Show	GitHub Exploit DB Packet Storm

264538	7.5	HIGH Network	boa	boa	Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters.	CWE-20 Improper Input Validation	CVE-2016-9564	2024-11-21 12:01	2016-11-30	Show	GitHub Exploit DB Packet Storm

264539	9.8	CRITICAL Network	exponentcms	exponent_cms	In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments. The method showComments is defined in the expCommentControllercontr…	CWE-89 SQL Injection	CVE-2016-9481	2024-11-21 12:01	2016-11-30	Show	GitHub Exploit DB Packet Storm

264540	9.1	CRITICAL Network	libdwarf_project	libdwarf	libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-9480	2024-11-21 12:01	2016-11-30	Show	GitHub Exploit DB Packet Storm