Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256591	7.2	危険	IBM	-	IBM AIX および VIOS の qoslist におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0961	2010-03-18 12:09	2010-03-5	Show	GitHub Exploit DB Packet Storm

256592	9	危険	マイクロソフト	-	Microsoft Virtual PC の VMM におけるゲスト OS 内で任意のカーネルモードコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1542	2010-03-17 12:18	2009-07-14	Show	GitHub Exploit DB Packet Storm

256593	6.8	警告	IBM	-	IBM Lotus Domino Web Access におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-0921	2010-03-16 11:15	2010-03-3	Show	GitHub Exploit DB Packet Storm

256594	4.3	警告	IBM	-	IBM Lotus Domino Web Access におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0920	2010-03-16 11:14	2010-03-3	Show	GitHub Exploit DB Packet Storm

256595	10	危険	IBM	-	IBM Lotus Domino Web Access の UltraLite 機能における脆弱性	CWE-noinfo 情報不足	CVE-2010-0918	2010-03-16 11:14	2010-03-3	Show	GitHub Exploit DB Packet Storm

256596	4.9	警告	サイバートラスト株式会社レッドハット SystemTap	-	SystemTap の _get_argv および _get_compat_argv 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-0411	2010-03-16 11:14	2010-02-8	Show	GitHub Exploit DB Packet Storm

256597	10	危険	サイバートラスト株式会社レッドハット SystemTap	-	SystemTap の stap-server における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4273	2010-03-16 11:14	2010-01-26	Show	GitHub Exploit DB Packet Storm

256598	6.5	警告	サイバートラスト株式会社 Linux レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0298	2010-03-16 11:13	2010-02-9	Show	GitHub Exploit DB Packet Storm

256599	4.4	警告	サイバートラスト株式会社 Fabrice Bellard レッドハット	-	QEMU の usb_host_handle_control 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0297	2010-03-16 11:13	2010-02-9	Show	GitHub Exploit DB Packet Storm

256600	6.8	警告	サン・マイクロシステムズ freedesktop.org	-	Poppler における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3605	2010-03-15 16:40	2009-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265671	5.5	MEDIUM Local	apple	mac_os_x	Terminal in Apple OS X before 10.12 uses weak permissions for the .bash_history and .bash_session files, which allows local users to obtain sensitive information via unspecified vectors.	CWE-200 Information Exposure	CVE-2016-4755	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265672	7.5	HIGH Network	apple	os_x_server	ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.	CWE-310 Cryptographic Issues	CVE-2016-4754	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265673	7.8	HIGH Local	apple	watchos tvos iphone_os mac_os_x	Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in a privileged context via a crafted app.	CWE-20 Improper Input Validation	CVE-2016-4753	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265674	5.5	MEDIUM Local	apple	mac_os_x	The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CF_RETURNS_RETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering…	CWE-200 Information Exposure	CVE-2016-4752	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265675	3.5	LOW Network	apple	safari	The Safari Tabs component in Apple Safari before 10 allows remote attackers to spoof the address bar of a tab via a crafted web site.	CWE-254 7PK - Security Features	CVE-2016-4751	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265676	7.8	HIGH Local	apple	iphone_os mac_os_x	S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4750	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265677	5.3	MEDIUM Local	apple	mac_os_x	Perl in Apple OS X before 10.12 allows local users to bypass the taint-mode protection mechanism via a crafted environment variable.	CWE-254 7PK - Security Features	CVE-2016-4748	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265678	5.3	MEDIUM Network	apple	mac_os_x	The Kerberos 5 (aka krb5) PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user a…	CWE-200 Information Exposure	CVE-2016-4745	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265679	5.5	MEDIUM Local	apple	mac_os_x	NSSecureTextField in Apple OS X before 10.12 does not enable Secure Input, which allows attackers to discover credentials via a crafted app.	CWE-200 Information Exposure	CVE-2016-4742	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265680	3.7	LOW Network	apple	mac_os_x	mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending …	CWE-200 Information Exposure	CVE-2016-4739	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed