Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257281	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000_clean_rx_irq 関数における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1385	2010-02-15 11:03	2009-06-4	Show	GitHub Exploit DB Packet Storm

257282	4.6	警告	サイバートラスト株式会社 Todd C. Miller	-	sudo の Perl スクリプト実行時における権限昇格の脆弱性	-	CVE-2005-4158	2010-02-15 11:03	2005-11-8	Show	GitHub Exploit DB Packet Storm

257283	1	注意	オラクル	-	Oracle Database および Oracle Application Server の Unzip コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3412	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

257284	3.2	注意	オラクル	-	Oracle Database の Oracle Spatial コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3413	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

257285	3.6	注意	オラクル	-	Oracle Database の RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3410	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257286	4	警告	オラクル	-	Oracle Database の Logical Standby コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-1996	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257287	4.9	警告	オラクル	-	Oracle Database の Oracle Spatial コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3414	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257288	4.9	警告	オラクル	-	Oracle Database の Oracle Data Pump コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3411	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257289	6	警告	オラクル	-	Oracle Database の Application Express Application Builder コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0076	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257290	9	危険	オラクル	-	Oracle Database の Oracle OLAP コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3415	2010-02-12 12:20	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267871	5.5	MEDIUM Local	uclouvain fedoraproject	openjpeg fedora	Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE:…	CWE-369 Divide By Zero	CVE-2016-4797	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

267872	5.5	MEDIUM Local	uclouvain fedoraproject	openjpeg fedora	Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4796	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

267873	5.5	MEDIUM Local	mini-xml_project debian	mini-xml debian_linux	The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4571	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

267874	5.5	MEDIUM Local	mini-xml_project debian	mini-xml debian_linux	The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4570	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

267875	7.5	HIGH Network	cakephp	cakephp	The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.	CWE-20 Improper Input Validation	CVE-2016-4793	2024-11-21 11:52	2017-01-24	Show	GitHub Exploit DB Packet Storm

267876	6.8	MEDIUM Physics	cryptsetup_project	cryptsetup	The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.	CWE-287 Improper Authentication	CVE-2016-4484	2024-11-21 11:52	2017-01-24	Show	GitHub Exploit DB Packet Storm

267877	6.1	MEDIUM Network	roundcube	webmail	Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message.	CWE-79 Cross-site Scripting	CVE-2016-4552	2024-11-21 11:52	2016-12-21	Show	GitHub Exploit DB Packet Storm

267878	5.5	MEDIUM Local	redhat	enterprise_virtualization	Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2016-4443	2024-11-21 11:52	2016-12-15	Show	GitHub Exploit DB Packet Storm

267879	4.4	MEDIUM Network	phpmyadmin	phpmyadmin	An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the u…	CWE-254 7PK - Security Features	CVE-2016-4412	2024-11-21 11:52	2016-12-11	Show	GitHub Exploit DB Packet Storm

267880	7.5	HIGH Network	hp	system_management_homepage	HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4396	2024-11-21 11:52	2016-10-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed