Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256061 9.3 危険 マイクロソフト - Microsoft Windows の Microsoft Paint における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0028 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
256062 7.2 危険 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-0233 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
256063 6.3 警告 マイクロソフト - Microsoft Windows の KDC におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0035 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
256064 7.1 危険 マイクロソフト - Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2010-0021 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
256065 10 危険 マイクロソフト - Microsoft Windows の SMB 実装におけるアクセス権を取得される脆弱性 CWE-264
CWE-310
CVE-2010-0231 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
256066 7.8 危険 マイクロソフト - Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0022 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
256067 9 危険 マイクロソフト - Microsoft Windows の SMB 実装における任意のコードを実行される脆弱性 CWE-20
CWE-94
CVE-2010-0020 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
256068 6.9 警告 マイクロソフト - Microsoft Windows の Client/Server Run-time Subsystem における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0023 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
256069 4 警告 マイクロソフト - Microsoft Windows の Hyper-V サーバ実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0026 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
256070 9.3 危険 日本電気
アップル
富士通
古河電気工業
ヒューレット・パッカード
インターネットイニシアティブ
アラクサラネットワークス
日立		 - IPv6 NDP 実装における Neighbor Discovery メッセージの送信元検証処理に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2476 2010-03-3 11:43 2008-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265211 7.5 HIGH
Network 		novell
canonical
linux 		suse_linux_enterprise_server
suse_linux_enterprise_debuginfo
suse_linux_enterprise_software_development_kit
ubuntu_linux
linux_kernel 		The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack m… CWE-200
Information Exposure 		CVE-2016-4485 2024-11-21 11:52 2016-05-23 Show GitHub Exploit DB Packet Storm
265212 6.2 MEDIUM
Local 		canonical
linux
novell
fedoraproject 		ubuntu_linux
linux_kernel
suse_linux_enterprise_module_for_public_cloud
suse_linux_enterprise_server
suse_linux_enterprise_live_patching
suse_linux_enterprise_desktop
suse_linux_ent… 		The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from k… CWE-200
Information Exposure 		CVE-2016-4482 2024-11-21 11:52 2016-05-23 Show GitHub Exploit DB Packet Storm
265213 6.1 MEDIUM
Network 		mediaelementjs
wordpress 		mediaelement.js
wordpress 		Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2016-4567 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
265214 6.1 MEDIUM
Network 		wordpress
plupload 		wordpress
plupload 		Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-O… CWE-79
Cross-site Scripting 		CVE-2016-4566 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
265215 9.8 CRITICAL
Network 		php
opensuse
fedoraproject
debian 		php
leap
opensuse
fedora
debian_linux 		The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a d… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4544 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
265216 9.8 CRITICAL
Network 		hp
php
fedoraproject
opensuse 		system_management_homepage
php
fedora
leap 		The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial o… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4543 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
265217 9.8 CRITICAL
Network 		php
opensuse
fedoraproject 		php
leap
fedora 		The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4542 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
265218 9.8 CRITICAL
Network 		fedoraproject
php
opensuse 		fedora
php
leap 		The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds… NVD-CWE-Other
CVE-2016-4541 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
265219 9.8 CRITICAL
Network 		fedoraproject
opensuse
php 		fedora
leap
php 		The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bound… NVD-CWE-Other
CVE-2016-4540 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
265220 9.8 CRITICAL
Network 		php
opensuse
fedoraproject 		php
leap
fedora 		The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segment… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4539 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm