Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257331	6.8	警告	GNU Project XEmacs サイバートラスト株式会社	-	Emacs および XEmacs における .flc ファイルの処理に関する任意のコードを実行される脆弱性	CWE-DesignError	CVE-2008-2142	2010-02-2 11:43	2008-05-12	Show	GitHub Exploit DB Packet Storm

257332	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4370	2010-02-2 11:43	2009-12-16	Show	GitHub Exploit DB Packet Storm

257333	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Contact モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4369	2010-02-2 11:42	2009-12-16	Show	GitHub Exploit DB Packet Storm

257334	7.5	危険	日立	-	Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-02-2 11:42	2009-12-22	Show	GitHub Exploit DB Packet Storm

257335	4.3	警告	VMware	-	複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3731	2010-02-1 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

257336	10	危険	サイバートラスト株式会社 Linux	-	Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2008-1673	2010-02-1 11:51	2008-06-10	Show	GitHub Exploit DB Packet Storm

257337	10	危険	ヒューレット・パッカード	-	複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-3027	2010-02-1 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

257338	9.3	危険	KDE project Glyph & Cog, LLC GNOME Project サイバートラスト株式会社レッドハット	-	Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4035	2010-01-29 09:54	2009-12-16	Show	GitHub Exploit DB Packet Storm

257339	7.8	危険	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey の GeckoActiveXObject 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3987	2010-01-29 09:54	2009-12-15	Show	GitHub Exploit DB Packet Storm

257340	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3986	2010-01-29 09:54	2009-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264761	9.8	CRITICAL Network	haxx	curl	The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables.	CWE-415 Double Free	CVE-2016-8618	2024-11-21 11:59	2018-08-1	Show	GitHub Exploit DB Packet Storm

264762	7.5	HIGH Network	redhat	ansible	A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and i…	CWE-320 Key Management Errors	CVE-2016-8614	2024-11-21 11:59	2018-08-1	Show	GitHub Exploit DB Packet Storm

264763	7.7	HIGH Network	redhat	openshift	The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect net…	-	CVE-2016-8631	2024-11-21 11:59	2018-08-1	Show	GitHub Exploit DB Packet Storm

264764	9.1	CRITICAL Network	redhat	ansible	Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbit…	CWE-77 Command Injection	CVE-2016-8628	2024-11-21 11:59	2018-08-1	Show	GitHub Exploit DB Packet Storm

264765	6.1	MEDIUM Network	theforeman	foreman	A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains HTML tags, the console output shown in th…	-	CVE-2016-8613	2024-11-21 11:59	2018-08-1	Show	GitHub Exploit DB Packet Storm

264766	6.5	MEDIUM Network	openstack	glance	A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 `/images` API POST method for authenticated users, resulting in possible denia…	-	CVE-2016-8611	2024-11-21 11:59	2018-08-1	Show	GitHub Exploit DB Packet Storm

264767	7.8	HIGH Local	redhat	jboss_enterprise_application_platform	It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8657	2024-11-21 11:59	2018-08-1	Show	GitHub Exploit DB Packet Storm

264768	6.5	MEDIUM Network	redhat	ceph enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server	A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or sp…	CWE-20 Improper Input Validation	CVE-2016-8626	2024-11-21 11:59	2018-08-1	Show	GitHub Exploit DB Packet Storm

264769	4.9	MEDIUM Network	redhat	ansible_engine virtualization	An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would sti…	-	CVE-2016-8647	2024-11-21 11:59	2018-07-26	Show	GitHub Exploit DB Packet Storm

264770	7.8	HIGH Local	cryptic-apps	hopper_disassembler	An exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of Hopper Disassembler 3.11.20. A specially crafted ELF file can cause attacker controlled pointer arithm…	CWE-787 Out-of-bounds Write	CVE-2016-8390	2024-11-21 11:59	2018-06-5	Show	GitHub Exploit DB Packet Storm