Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255181 9.3 危険 レッドハット
リアルネットワークス		 - RealNetworks RealPlayer における RA5 ヒープオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4383 2011-01-11 14:29 2010-12-10 Show GitHub Exploit DB Packet Storm
255182 9.3 危険 レッドハット
リアルネットワークス		 - RealNetworks RealPlayer における RealMedia ヒープオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4382 2011-01-11 14:28 2010-12-10 Show GitHub Exploit DB Packet Storm
255183 9.3 危険 リアルネットワークス - RealNetworks RealPlayer における AAC ヒープオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4381 2011-01-11 14:28 2010-12-10 Show GitHub Exploit DB Packet Storm
255184 9.3 危険 リアルネットワークス - RealNetworks RealPlayer におけるサウンドヒープオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4380 2011-01-11 14:27 2010-12-10 Show GitHub Exploit DB Packet Storm
255185 4.3 警告 WEBインベンター - SGX-SP Final および SGX-SP Final NE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3926 2011-01-11 14:05 2011-01-11 Show GitHub Exploit DB Packet Storm
255186 2.6 注意 WEBインベンター - Contents-Mall におけるパスワードの取扱いに関する脆弱性 CWE-Other
その他 		CVE-2010-3925 2011-01-11 14:04 2011-01-11 Show GitHub Exploit DB Packet Storm
255187 4 警告 エイムラック - Aipo における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3924 2011-01-11 14:02 2011-01-11 Show GitHub Exploit DB Packet Storm
255188 9.3 危険 レッドハット
リアルネットワークス		 - RealNetworks RealPlayer における SIPR ヒープオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4379 2011-01-7 15:36 2010-12-10 Show GitHub Exploit DB Packet Storm
255189 10 危険 リアルネットワークス - RealNetworks RealPlayer の AAC スペクトルデータの解析処理における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0125 2011-01-7 15:35 2010-12-10 Show GitHub Exploit DB Packet Storm
255190 5 警告 リアルネットワークス - RealNetworks RealPlayer の cook コーデックにおける任意のメモリへアクセスされる脆弱性 CWE-Other
その他 		CVE-2010-2579 2011-01-7 15:35 2010-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264631 9.8 CRITICAL
Network 		x.org
fedoraproject 		libxfixes
fedora 		Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and … CWE-264
CWE-190
Permissions, Privileges, and Access Controls
 Integer Overflow or Wraparound 		CVE-2016-7944 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
264632 9.8 CRITICAL
Network 		fedoraproject
x.org 		fedora
libx11 		The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations. CWE-787
 Out-of-bounds Write 		CVE-2016-7943 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
264633 9.8 CRITICAL
Network 		fedoraproject
x.org 		fedora
libx11 		The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations. CWE-264
CWE-787
Permissions, Privileges, and Access Controls
 Out-of-bounds Write 		CVE-2016-7942 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
264634 5.5 MEDIUM
Local 		mariadb
oracle
wolfssl
debian 		mariadb
mysql
wolfssl
debian_linux 		The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differen… NVD-CWE-noinfo
CVE-2016-7440 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
264635 5.5 MEDIUM
Local 		wolfssl wolfssl The C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences. CWE-310
Cryptographic Issues 		CVE-2016-7439 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
264636 5.5 MEDIUM
Local 		wolfssl wolfssl The C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences. CWE-310
Cryptographic Issues 		CVE-2016-7438 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
264637 6.0 MEDIUM
Local 		qemu
opensuse 		qemu
leap 		Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large numbe… CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2016-7995 2024-11-21 11:58 2016-12-10 Show GitHub Exploit DB Packet Storm
264638 6.0 MEDIUM
Local 		qemu
opensuse 		qemu
leap 		Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption… CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2016-7994 2024-11-21 11:58 2016-12-10 Show GitHub Exploit DB Packet Storm
264639 6.0 MEDIUM
Local 		qemu
opensuse
redhat 		qemu
leap
openstack
virtualization 		Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to cause a denial of service (memory consump… CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2016-7466 2024-11-21 11:58 2016-12-10 Show GitHub Exploit DB Packet Storm
264640 5.5 MEDIUM
Local 		intel proset\/wireless_software_and_drivers Buffer overflow in Intel PROSet/Wireless Software and Drivers in versions before 19.20.3 allows a local user to crash iframewrk.exe causing a potential denial of service. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-8104 2024-11-21 11:58 2016-12-9 Show GitHub Exploit DB Packet Storm