Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256451 4.3 警告 アップル
Ruby on Rails project		 - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3009 2010-04-16 16:58 2009-09-8 Show GitHub Exploit DB Packet Storm
256452 7.5 危険 アップル
Ruby on Rails project		 - Ruby on Rails のダイジェスト認証における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-2422 2010-04-16 16:57 2009-07-10 Show GitHub Exploit DB Packet Storm
256453 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0526 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
256454 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0520 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
256455 6.8 警告 アップル - Apple Mac OS X の QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0519 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
256456 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0518 2010-04-16 16:56 2010-03-29 Show GitHub Exploit DB Packet Storm
256457 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0517 2010-04-16 16:56 2010-03-29 Show GitHub Exploit DB Packet Storm
256458 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0516 2010-04-15 18:39 2010-03-29 Show GitHub Exploit DB Packet Storm
256459 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0515 2010-04-15 18:39 2010-03-29 Show GitHub Exploit DB Packet Storm
256460 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0514 2010-04-15 18:38 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270071 7.8 HIGH
Local 		libreoffice
canonical 		libreoffice
ubuntu_linux 		The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-0794 2024-11-21 11:42 2016-02-19 Show GitHub Exploit DB Packet Storm
270072 7.5 HIGH
Network 		postgresql
canonical
debian 		postgresql
ubuntu_linux
debian_linux 		PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-0773 2024-11-21 11:42 2016-02-18 Show GitHub Exploit DB Packet Storm
270073 8.8 HIGH
Network 		postgresql
canonical
debian 		postgresql
ubuntu_linux
debian_linux 		PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) fo… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0766 2024-11-21 11:42 2016-02-18 Show GitHub Exploit DB Packet Storm
270074 5.3 MEDIUM
Network 		rubyonrails
debian
fedoraproject
opensuse 		rails
debian_linux
fedora
leap 		Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers t… NVD-CWE-noinfo
CVE-2016-0753 2024-11-21 11:42 2016-02-16 Show GitHub Exploit DB Packet Storm
270075 7.5 HIGH
Network 		rubyonrails ruby_on_rails
rails 		actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly… CWE-399
 Resource Management Errors 		CVE-2016-0751 2024-11-21 11:42 2016-02-16 Show GitHub Exploit DB Packet Storm
270076 5.3 MEDIUM
Network 		f5
canonical
debian
opensuse
apple 		nginx
ubuntu_linux
debian_linux
leap
xcode 		The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) v… CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-0747 2024-11-21 11:42 2016-02-16 Show GitHub Exploit DB Packet Storm
270077 9.8 CRITICAL
Network 		f5
canonical
debian
opensuse
apple 		nginx
ubuntu_linux
debian_linux
leap
xcode 		Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspeci… CWE-416
 Use After Free 		CVE-2016-0746 2024-11-21 11:42 2016-02-16 Show GitHub Exploit DB Packet Storm
270078 7.5 HIGH
Network 		f5
canonical
debian
opensuse
apple
redhat 		nginx
ubuntu_linux
debian_linux
leap
xcode
software_collections 		The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response. CWE-476
 NULL Pointer Dereference 		CVE-2016-0742 2024-11-21 11:42 2016-02-16 Show GitHub Exploit DB Packet Storm
270079 3.7 LOW
Network 		openssl openssl The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for… CWE-200
Information Exposure 		CVE-2016-0701 2024-11-21 11:42 2016-02-15 Show GitHub Exploit DB Packet Storm
270080 6.1 MEDIUM
Network 		tollgrade smartgrid_lighthouse_sensor_management_system Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web … CWE-79
Cross-site Scripting 		CVE-2016-0866 2024-11-21 11:42 2016-02-13 Show GitHub Exploit DB Packet Storm