Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256181	7.2	危険	レッドハット	-	Red Hat Package Manager の lib/fsm.c における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2005-4889	2010-09-29 16:00	2010-06-8	Show	GitHub Exploit DB Packet Storm

256182	10	危険	シスコシステムズ	-	Cisco Industrial Ethernet 3000 シリーズに SNMP Community String がハードコードされている問題	CWE-264 認可・権限・アクセス制御	CVE-2010-1574	2010-09-29 16:00	2010-07-13	Show	GitHub Exploit DB Packet Storm

256183	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0778	2010-09-29 16:00	2010-06-18	Show	GitHub Exploit DB Packet Storm

256184	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0779	2010-09-29 16:00	2010-06-18	Show	GitHub Exploit DB Packet Storm

256185	4.3	警告	IBM	-	IBM HTTP Server の mod_ibm_ssl におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2327	2010-09-29 15:59	2010-03-18	Show	GitHub Exploit DB Packet Storm

256186	6.9	警告	アップル	-	Windows 上で稼働する Apple Safari における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1805	2010-09-28 14:46	2010-09-7	Show	GitHub Exploit DB Packet Storm

256187	4.3	警告	Zope Foundation	-	Zope の ZServer におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-3198	2010-09-28 14:46	2010-09-1	Show	GitHub Exploit DB Packet Storm

256188	-	-	Blackboard, Inc.	-	Blackboard Transact データベースに情報漏えいの脆弱性	-	-	2010-09-28 14:46	2010-09-2	Show	GitHub Exploit DB Packet Storm

256189	6.8	警告	w3m project ターボリナックスサイバートラスト株式会社レッドハット	-	w3m のistream.c における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2074	2010-09-27 16:24	2010-06-16	Show	GitHub Exploit DB Packet Storm

256190	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックス OpenLDAP Foundation	-	OpenLDAP における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3767	2010-09-27 16:23	2009-10-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264491	8.8	HIGH Network	trendmicro	interscan_web_security_virtual_appliance	Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earli…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-9315	2024-11-21 12:00	2017-02-21	Show	GitHub Exploit DB Packet Storm

264492	7.8	HIGH Local	trendmicro	interscan_web_security_virtual_appliance	Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authent…	CWE-200 Information Exposure	CVE-2016-9314	2024-11-21 12:00	2017-02-21	Show	GitHub Exploit DB Packet Storm

264493	9.9	CRITICAL Network	trendmicro	interscan_web_security_virtual_appliance	Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated,…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-9269	2024-11-21 12:00	2017-02-21	Show	GitHub Exploit DB Packet Storm

264494	6.1	MEDIUM Network	otrs	otrs	Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0.14 allows remote attackers to inject arbitrary web script …	CWE-79 Cross-site Scripting	CVE-2016-9139	2024-11-21 12:00	2017-02-17	Show	GitHub Exploit DB Packet Storm

264495	6.1	MEDIUM Network	ibm	websphere_message_broker integration_bus	IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could expl…	CWE-254 7PK - Security Features	CVE-2016-9010	2024-11-21 12:00	2017-02-16	Show	GitHub Exploit DB Packet Storm

264496	7.8	HIGH Local	ibm	aix vios	IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV91006, IV91007, IV91008, IV91010, IV91011.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8972	2024-11-21 12:00	2017-02-16	Show	GitHub Exploit DB Packet Storm

264497	5.4	MEDIUM Network	ibm	rational_collaborative_lifecycle_management	IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin…	CWE-79 Cross-site Scripting	CVE-2016-8968	2024-11-21 12:00	2017-02-16	Show	GitHub Exploit DB Packet Storm

264498	5.5	MEDIUM Local	ibm	aix	IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system. IBM APARs: IV91488, IV91487, IV91456, IV90234.	CWE-20 Improper Input Validation	CVE-2016-8944	2024-11-21 12:00	2017-02-16	Show	GitHub Exploit DB Packet Storm

264499	8.8	HIGH Network	imagemagick opensuse	imagemagick leap opensuse	The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocatio…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-8866	2024-11-21 12:00	2017-02-16	Show	GitHub Exploit DB Packet Storm

264500	8.8	HIGH Network	imagemagick debian	imagemagick debian_linux	The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failur…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-8862	2024-11-21 12:00	2017-02-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed