Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256211 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3794 2010-02-9 12:35 2009-12-8 Show GitHub Exploit DB Packet Storm
256212 10 危険 IBM - IBM Lotus Domino Web Access におけるリンク処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-0276 2010-02-8 13:19 2010-01-7 Show GitHub Exploit DB Packet Storm
256213 10 危険 IBM - IBM Lotus Domino Web Access における脆弱性 CWE-noinfo
情報不足 		CVE-2009-4594 2010-02-8 13:19 2009-06-5 Show GitHub Exploit DB Packet Storm
256214 10 危険 IBM - IBM Lotus Domino Web Access の Ultra-light Mode における status-alerts URL の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-0275 2010-02-8 13:18 2010-01-7 Show GitHub Exploit DB Packet Storm
256215 10 危険 IBM - IBM Lotus Domino Web Access の Ultra-light Mode における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0274 2010-02-8 13:17 2010-01-7 Show GitHub Exploit DB Packet Storm
256216 3.6 注意 サイバートラスト株式会社
D-Bus
レッドハット		 - D-Bus の _dbus_validate_signature_with_reason 関数におけるシグネチャを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1189 2010-02-5 14:22 2009-04-27 Show GitHub Exploit DB Packet Storm
256217 6.5 警告 シスコシステムズ - Cisco ASA のデフォルト設定におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4455 2010-02-4 11:20 2009-12-17 Show GitHub Exploit DB Packet Storm
256218 4 警告 IBM - IBM DB2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4439 2010-02-4 11:20 2009-12-28 Show GitHub Exploit DB Packet Storm
256219 6.5 警告 IBM - IBM DB2 におけるデータを使用される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4438 2010-02-4 11:19 2009-12-28 Show GitHub Exploit DB Packet Storm
256220 10 危険 IBM - IBM DB2 の Spatial Extender コンポーネントに同梱されているストアドプロシージャにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-4335 2010-02-4 11:19 2009-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266441 8.1 HIGH
Network 		apache
oracle 		struts
siebel_e-billing 		Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to … CWE-77
Command Injection 		CVE-2016-3081 2024-11-21 11:49 2016-04-26 Show GitHub Exploit DB Packet Storm
266442 9.8 CRITICAL
Network 		libgd
debian
fedoraproject
canonical
opensuse
php 		libgd
debian_linux
fedora
ubuntu_linux
opensuse
php 		Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed g… CWE-681
 Incorrect Conversion between Numeric Types 		CVE-2016-3074 2024-11-21 11:49 2016-04-26 Show GitHub Exploit DB Packet Storm
266443 6.1 MEDIUM
Network 		blackberry enterprise_server Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted … CWE-79
Cross-site Scripting 		CVE-2016-3126 2024-11-21 11:49 2016-04-23 Show GitHub Exploit DB Packet Storm
266444 4.6 MEDIUM
Physics 		lexmark printer_firmware Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows ph… CWE-200
Information Exposure 		CVE-2016-3145 2024-11-21 11:49 2016-04-22 Show GitHub Exploit DB Packet Storm
266445 7.5 HIGH
Network 		opensuse
cairographics 		opensuse
cairo 		The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a neg… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3190 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266446 6.4 MEDIUM
Network 		oracle agile_product_lifecycle_management_framework Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and in… NVD-CWE-noinfo
CVE-2016-3431 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266447 4.5 MEDIUM
Physics 		oracle retail_xstore_point_of_service Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentia… NVD-CWE-noinfo
CVE-2016-3429 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266448 3.1 LOW
Adjacent 		oracle agile_engineering_data_management Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect availability via vector… NVD-CWE-noinfo
CVE-2016-3428 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266449 3.1 LOW
Network 		oracle jdk
jre 		Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE. NVD-CWE-noinfo
CVE-2016-3426 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266450 4.3 MEDIUM
Network 		oracle jrockit
jdk
jre 		Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP. NVD-CWE-noinfo
CVE-2016-3425 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm