Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256771 8.5 危険 Samba Project - Samba の smbd におけるファイルパーミッションを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0728 2010-03-18 12:09 2010-03-10 Show GitHub Exploit DB Packet Storm
256772 7.2 危険 IBM - IBM AIX および VIOS の qosmod におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0960 2010-03-18 12:09 2010-03-5 Show GitHub Exploit DB Packet Storm
256773 7.2 危険 IBM - IBM AIX および VIOS の qoslist におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0961 2010-03-18 12:09 2010-03-5 Show GitHub Exploit DB Packet Storm
256774 9 危険 マイクロソフト - Microsoft Virtual PC の VMM におけるゲスト OS 内で任意のカーネルモードコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1542 2010-03-17 12:18 2009-07-14 Show GitHub Exploit DB Packet Storm
256775 6.8 警告 IBM - IBM Lotus Domino Web Access におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-0921 2010-03-16 11:15 2010-03-3 Show GitHub Exploit DB Packet Storm
256776 4.3 警告 IBM - IBM Lotus Domino Web Access におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0920 2010-03-16 11:14 2010-03-3 Show GitHub Exploit DB Packet Storm
256777 10 危険 IBM - IBM Lotus Domino Web Access の UltraLite 機能における脆弱性 CWE-noinfo
情報不足
CVE-2010-0918 2010-03-16 11:14 2010-03-3 Show GitHub Exploit DB Packet Storm
256778 4.9 警告 サイバートラスト株式会社
レッドハット
SystemTap
- SystemTap の _get_argv および _get_compat_argv 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2010-0411 2010-03-16 11:14 2010-02-8 Show GitHub Exploit DB Packet Storm
256779 10 危険 サイバートラスト株式会社
レッドハット
SystemTap
- SystemTap の stap-server における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-4273 2010-03-16 11:14 2010-01-26 Show GitHub Exploit DB Packet Storm
256780 6.5 警告 サイバートラスト株式会社
Linux
レッドハット
- KVM の x86 エミュレータにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0298 2010-03-16 11:13 2010-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267791 8.1 HIGH
Network
apache
oracle
struts
siebel_e-billing
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to … CWE-77
Command Injection
CVE-2016-3081 2024-11-21 11:49 2016-04-26 Show GitHub Exploit DB Packet Storm
267792 9.8 CRITICAL
Network
libgd
debian
fedoraproject
canonical
opensuse
php
libgd
debian_linux
fedora
ubuntu_linux
opensuse
php
Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed g… CWE-681
 Incorrect Conversion between Numeric Types
CVE-2016-3074 2024-11-21 11:49 2016-04-26 Show GitHub Exploit DB Packet Storm
267793 6.1 MEDIUM
Network
blackberry enterprise_server Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted … CWE-79
Cross-site Scripting
CVE-2016-3126 2024-11-21 11:49 2016-04-23 Show GitHub Exploit DB Packet Storm
267794 4.6 MEDIUM
Physics
lexmark printer_firmware Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows ph… CWE-200
Information Exposure
CVE-2016-3145 2024-11-21 11:49 2016-04-22 Show GitHub Exploit DB Packet Storm
267795 7.5 HIGH
Network
opensuse
cairographics
opensuse
cairo
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a neg… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3190 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
267796 6.4 MEDIUM
Network
oracle agile_product_lifecycle_management_framework Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and in… NVD-CWE-noinfo
CVE-2016-3431 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
267797 4.5 MEDIUM
Physics
oracle retail_xstore_point_of_service Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentia… NVD-CWE-noinfo
CVE-2016-3429 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
267798 3.1 LOW
Adjacent
oracle agile_engineering_data_management Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect availability via vector… NVD-CWE-noinfo
CVE-2016-3428 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
267799 3.1 LOW
Network
oracle jdk
jre
Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE. NVD-CWE-noinfo
CVE-2016-3426 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
267800 4.3 MEDIUM
Network
oracle jrockit
jdk
jre
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP. NVD-CWE-noinfo
CVE-2016-3425 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm