Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256021 9.3 危険 マイクロソフト - Microsoft Word における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3217 2010-10-27 15:14 2010-10-12 Show GitHub Exploit DB Packet Storm
256022 5 警告 レッドハット
Pidgin
Adium
オラクル		 - Pidgin および Adium の MSN プロトコルプラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0277 2010-10-27 14:33 2010-01-9 Show GitHub Exploit DB Packet Storm
256023 9.3 危険 マイクロソフト - Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3216 2010-10-26 15:35 2010-10-12 Show GitHub Exploit DB Packet Storm
256024 9.3 危険 マイクロソフト - Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3215 2010-10-26 15:34 2010-10-12 Show GitHub Exploit DB Packet Storm
256025 9.3 危険 マイクロソフト - Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2750 2010-10-26 15:33 2010-10-12 Show GitHub Exploit DB Packet Storm
256026 9.3 危険 マイクロソフト - Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2748 2010-10-26 15:33 2010-10-12 Show GitHub Exploit DB Packet Storm
256027 9.3 危険 マイクロソフト - Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2747 2010-10-26 15:32 2010-10-12 Show GitHub Exploit DB Packet Storm
256028 7.2 危険 マイクロソフト - 複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2741 2010-10-26 15:31 2010-10-12 Show GitHub Exploit DB Packet Storm
256029 7.2 危険 マイクロソフト - 複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2740 2010-10-26 15:29 2010-10-12 Show GitHub Exploit DB Packet Storm
256030 7.2 危険 マイクロソフト - 複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2744 2010-10-26 15:28 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264631 5.4 MEDIUM
Network 		redhat jboss_bpm_suite
jboss_business_rules_management_system 		JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges t… - CVE-2016-8608 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
264632 5.4 MEDIUM
Network 		theforeman
redhat 		foreman
satellite
satellite_capsule 		It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to di… CWE-79
Cross-site Scripting 		CVE-2016-8639 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
264633 7.8 HIGH
Local 		dracut_project dracut A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode update… - CVE-2016-8637 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
264634 5.9 MEDIUM
Network 		mozilla
redhat 		network_security_services
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux_serv… 		It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining t… - CVE-2016-8635 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
264635 5.4 MEDIUM
Network 		theforeman foreman A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render t… - CVE-2016-8634 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
264636 7.5 HIGH
Network 		haxx curl curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong ho… - CVE-2016-8625 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
264637 7.5 HIGH
Network 		haxx curl A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosure. - CVE-2016-8623 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
264638 9.8 CRITICAL
Network 		haxx curl The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input. CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2016-8620 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
264639 9.8 CRITICAL
Network 		haxx curl The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free. CWE-415
 Double Free 		CVE-2016-8619 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
264640 5.9 MEDIUM
Network 		haxx curl A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. This means that if an u… CWE-255
Credentials Management 		CVE-2016-8616 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm