Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257051 7.6 危険 Mozilla Foundation - Mozilla Firefox の nsDocument::MaybePreLoadImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0168 2010-04-6 16:49 2010-03-23 Show GitHub Exploit DB Packet Storm
257052 9.3 危険 Mozilla Foundation - Mozilla Firefox の imgContainer::InternalAddFrameHelper 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0164 2010-04-6 16:49 2010-03-23 Show GitHub Exploit DB Packet Storm
257053 4.3 警告 Mozilla Foundation
レッドハット
- 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0171 2010-04-5 14:54 2010-03-23 Show GitHub Exploit DB Packet Storm
257054 4.3 警告 Mozilla Foundation - Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0170 2010-04-5 14:53 2010-03-23 Show GitHub Exploit DB Packet Storm
257055 7.5 危険 Heartlogic - HL-SiteManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1331 2010-04-2 15:02 2010-04-2 Show GitHub Exploit DB Packet Storm
257056 9.3 危険 Mozilla Foundation - Mozilla Firefox の Web Open Fonts Format デコーダ における整数オーバーフローの脆弱性 CWE-noinfo
情報不足
CVE-2010-1028 2010-04-2 14:05 2010-03-19 Show GitHub Exploit DB Packet Storm
257057 5 警告 富士通
アクセラテクノロジ
- Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性 CWE-200
情報漏えい
- 2010-04-2 14:05 2010-03-10 Show GitHub Exploit DB Packet Storm
257058 1.9 注意 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3556 2010-04-2 14:02 2010-01-19 Show GitHub Exploit DB Packet Storm
257059 10 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2009-4538 2010-04-2 14:02 2010-01-12 Show GitHub Exploit DB Packet Storm
257060 6.6 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3939 2010-04-2 14:00 2009-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264321 5.3 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in wrong matches and detection of the username in the rule due to non-constant execution time. All 4.6.x v… CWE-254
 7PK - Security Features
CVE-2016-9850 2024-11-21 12:01 2016-12-11 Show GitHub Exploit DB Packet Storm
264322 9.8 CRITICAL
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot']) and deny rules for username by using Null Byte in the username. All 4.6.x vers… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-9849 2024-11-21 12:01 2016-12-11 Show GitHub Exploit DB Packet Storm
264323 5.3 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including values of HttpOnly cookies. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4… CWE-200
Information Exposure
CVE-2016-9848 2024-11-21 12:01 2016-12-11 Show GitHub Exploit DB Packet Storm
264324 5.3 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the… CWE-200
Information Exposure
CVE-2016-9853 2024-11-21 12:01 2016-12-11 Show GitHub Exploit DB Packet Storm
264325 5.3 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the… CWE-200
Information Exposure
CVE-2016-9852 2024-11-21 12:01 2016-12-11 Show GitHub Exploit DB Packet Storm
264326 5.3 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpMyAdmin generates one at runtime. A vulnerability was reported where the way thi… CWE-310
Cryptographic Issues
CVE-2016-9847 2024-11-21 12:01 2016-12-11 Show GitHub Exploit DB Packet Storm
264327 9.9 CRITICAL
Network
pwc ace-advanced_business_application_programming PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communica… CWE-74
Injection
CVE-2016-9832 2024-11-21 12:01 2016-12-10 Show GitHub Exploit DB Packet Storm
264328 5.5 MEDIUM
Local
gnome libgsf An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently caus… CWE-476
 NULL Pointer Dereference
CVE-2016-9888 2024-11-21 12:01 2016-12-8 Show GitHub Exploit DB Packet Storm
264329 7.5 HIGH
Network
osgeo mapserver In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails. CWE-200
Information Exposure
CVE-2016-9839 2024-11-21 12:01 2016-12-8 Show GitHub Exploit DB Packet Storm
264330 9.8 CRITICAL
Network
joomla joomla\! The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a u… CWE-284
Improper Access Control
CVE-2016-9836 2024-11-21 12:01 2016-12-6 Show GitHub Exploit DB Packet Storm