Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256581 9.3 危険 アドビシステムズ
レッドハット
- Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0191 2010-04-28 15:56 2010-04-13 Show GitHub Exploit DB Packet Storm
256582 4.3 警告 アドビシステムズ
レッドハット
- Adobe Reader および Acrobat におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0190 2010-04-28 15:56 2010-04-13 Show GitHub Exploit DB Packet Storm
256583 7.8 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-4537 2010-04-28 15:21 2010-01-12 Show GitHub Exploit DB Packet Storm
256584 4.3 警告 IBM
Apache Software Foundation
アップル
サイバートラスト株式会社
ヒューレット・パッカード
ターボリナックス
レッドハット
- Apache の mod_proxy_ftp における UTF-7 エンコードに関するクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0005 2010-04-28 15:18 2008-01-11 Show GitHub Exploit DB Packet Storm
256585 10 危険 IntelliCom Innovation AB - IntelliCom NetBiter デバイスにおけるデフォルトパスワードの問題 CWE-255
証明書・パスワード管理
CVE-2009-4463 2010-04-27 16:10 2010-04-7 Show GitHub Exploit DB Packet Storm
256586 9.3 危険 Foxit Software Inc - Foxit Reader に任意のコード実行が可能な脆弱性 CWE-94
コード・インジェクション
CVE-2010-1239 2010-04-27 16:10 2010-04-6 Show GitHub Exploit DB Packet Storm
256587 10 危険 ヒューレット・パッカード - Broadcom NetXtreme 管理用ファームウェアにバッファオーバーフローの脆弱性 CWE-noinfo
情報不足
CVE-2010-0104 2010-04-27 16:09 2010-03-31 Show GitHub Exploit DB Packet Storm
256588 6.8 警告 アップル - AirPort Utility におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2822 2010-04-27 16:09 2010-03-31 Show GitHub Exploit DB Packet Storm
256589 9.3 危険 アップル - Apple Safari の ColorSync における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0040 2010-04-27 15:20 2010-03-15 Show GitHub Exploit DB Packet Storm
256590 4 警告 Squid-cache.org
サイバートラスト株式会社
ターボリナックス
レッドハット
- Squid の lib/rfc1035.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0308 2010-04-27 15:20 2010-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269461 3.7 LOW
Network
bouncycastle
debian
legion-of-the-bouncy-castle-java-crytography-api
debian_linux
In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other pa… CWE-320
 Key Management Errors
CVE-2016-1000346 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
269462 5.9 MEDIUM
Network
bouncycastle
debian
legion-of-the-bouncy-castle-java-crytography-api
debian_linux
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed,… CWE-361
 7PK - Time and State
CVE-2016-1000345 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
269463 7.4 HIGH
Network
bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider. CWE-310
Cryptographic Issues
CVE-2016-1000344 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
269464 7.5 HIGH
Network
bouncycastle
debian
legion-of-the-bouncy-castle-java-crytography-api
debian_linux
In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initial… CWE-310
Cryptographic Issues
CVE-2016-1000343 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
269465 7.5 HIGH
Network
bouncycastle
debian
legion-of-the-bouncy-castle-java-crytography-api
debian_linux
In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2016-1000342 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
269466 5.9 MEDIUM
Network
bouncycastle
debian
legion-of-the-bouncy-castle-java-crytography-api
debian_linux
In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of… CWE-361
 7PK - Time and State
CVE-2016-1000341 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
269467 7.5 HIGH
Network
bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.r… CWE-19
 Data Processing Errors
CVE-2016-1000340 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
269468 5.3 MEDIUM
Network
bouncycastle
debian
legion-of-the-bouncy-castle-java-crytography-api
debian_linux
In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table driven approach used in the algorithm it turns out that if … CWE-310
Cryptographic Issues
CVE-2016-1000339 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm
269469 7.5 HIGH
Network
bouncycastle
redhat
canonical
netapp
legion-of-the-bouncy-castle-java-crytography-api
satellite_capsule
ubuntu_linux
satellite
7-mode_transition_tool
In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up t… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2016-1000338 2024-11-21 11:43 2018-06-2 Show GitHub Exploit DB Packet Storm
269470 9.8 CRITICAL
Network
jfrog artifactory Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbitrary servlet application and execute arbitrary code by uplo… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2016-10036 2024-11-21 11:43 2018-05-2 Show GitHub Exploit DB Packet Storm