Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257281	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000_clean_rx_irq 関数における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1385	2010-02-15 11:03	2009-06-4	Show	GitHub Exploit DB Packet Storm

257282	4.6	警告	サイバートラスト株式会社 Todd C. Miller	-	sudo の Perl スクリプト実行時における権限昇格の脆弱性	-	CVE-2005-4158	2010-02-15 11:03	2005-11-8	Show	GitHub Exploit DB Packet Storm

257283	1	注意	オラクル	-	Oracle Database および Oracle Application Server の Unzip コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3412	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

257284	3.2	注意	オラクル	-	Oracle Database の Oracle Spatial コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3413	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

257285	3.6	注意	オラクル	-	Oracle Database の RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3410	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257286	4	警告	オラクル	-	Oracle Database の Logical Standby コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-1996	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257287	4.9	警告	オラクル	-	Oracle Database の Oracle Spatial コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3414	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257288	4.9	警告	オラクル	-	Oracle Database の Oracle Data Pump コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3411	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257289	6	警告	オラクル	-	Oracle Database の Application Express Application Builder コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0076	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257290	9	危険	オラクル	-	Oracle Database の Oracle OLAP コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3415	2010-02-12 12:20	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269801	7.8	HIGH Local	huawei	utps_firmware	Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unsp…	NVD-CWE-Other	CVE-2016-2780	2024-11-21 11:48	2016-04-13	Show	GitHub Exploit DB Packet Storm

269802	8.8	HIGH Network	huawei	policy_center_firmware	Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to gain privileges and cause a denial of service (system crash) via a crafted URL.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2405	2024-11-21 11:48	2016-04-13	Show	GitHub Exploit DB Packet Storm

269803	8.4	HIGH Local	nvidia	gpu_driver_r340 gpu_driver_r352	The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information, cause a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2558	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

269804	8.4	HIGH Local	nvidia	gpu_driver_r340 gpu_driver_r352	The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information from ker…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2557	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

269805	7.8	HIGH Local	nvidia	gpu_driver_r340 gpu_driver_r352	The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows improperly allows access to restricted functionality, which…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2556	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

269806	8.4	HIGH Local	qemu canonical debian redhat	qemu ubuntu_linux debian_linux openstack virtualization enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise…	The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2857	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

269807	9.8	CRITICAL Network	debian kamailio	debian_linux kamailio	Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memo…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2385	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

269808	7.5	HIGH Network	postgresql	postgresql	PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that pe…	CWE-254 7PK - Security Features	CVE-2016-2193	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

269809	7.8	HIGH Local	lenovo	fingerprint_manager touch_fingerprint	Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating lo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2393	2024-11-21 11:48	2016-04-11	Show	GitHub Exploit DB Packet Storm

269810	3.1	LOW Network	djangoproject	django	The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.	CWE-200 Information Exposure	CVE-2016-2513	2024-11-21 11:48	2016-04-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed