Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255361 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255362 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255363 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255364 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255365 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
255366 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
255367 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266471 9.8 CRITICAL
Network 		debian
suse
opensuse
canonical
google 		debian_linux
linux_enterprise
leap
ubuntu_linux
chrome 		Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. NVD-CWE-noinfo
CVE-2016-1659 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
266472 4.3 MEDIUM
Network 		novell
opensuse
google
debian 		suse_package_hub_for_suse_linux_enterprise
leap
chrome
debian_linux 		The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and o… CWE-200
CWE-284
Information Exposure
Improper Access Control 		CVE-2016-1658 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
266473 4.3 MEDIUM
Network 		debian
novell
opensuse
google 		debian_linux
suse_package_hub_for_suse_linux_enterprise
leap
chrome 		The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which… CWE-254
 7PK - Security Features 		CVE-2016-1657 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
266474 7.5 HIGH
Network 		google
suse
opensuse 		chrome
linux_enterprise
leap 		The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors. CWE-284
Improper Access Control 		CVE-2016-1656 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
266475 8.8 HIGH
Network 		debian
suse
opensuse
google
canonical 		debian_linux
linux_enterprise
leap
chrome
ubuntu_linux 		Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or pos… NVD-CWE-Other
CVE-2016-1655 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
266476 6.5 MEDIUM
Network 		debian
suse
opensuse
google
canonical 		debian_linux
linux_enterprise
leap
chrome
ubuntu_linux 		The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unk… CWE-20
 Improper Input Validation  		CVE-2016-1654 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
266477 8.8 HIGH
Network 		debian
suse
opensuse
canonical
google 		debian_linux
linux_enterprise
leap
ubuntu_linux
chrome 		The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecifie… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1653 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
266478 6.1 MEDIUM
Network 		debian
suse
opensuse
google 		debian_linux
linux_enterprise
leap
chrome 		Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allow… CWE-79
Cross-site Scripting 		CVE-2016-1652 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
266479 8.1 HIGH
Network 		google
debian
suse
opensuse 		chrome
debian_linux
linux_enterprise
leap 		fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers … CWE-200
Information Exposure 		CVE-2016-1651 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
266480 9.8 CRITICAL
Network 		dhcpcd_project
google 		dhcpcd
android 		dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attacke… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1503 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm