Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257481 6.4 警告 アップル - Apple Mac OS X の libsecurity における SSL サーバになりすまされる脆弱性 CWE-287
不適切な認証
CVE-2010-1802 2010-09-8 15:52 2010-08-25 Show GitHub Exploit DB Packet Storm
257482 6.8 警告 アップル - Apple Mac OS X の CoreGraphics におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1801 2010-09-8 15:52 2010-08-25 Show GitHub Exploit DB Packet Storm
257483 5 警告 アップル
ClamAV
- ClamAV の libclamav/mspack.c における qtm_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1311 2010-09-8 15:52 2010-04-8 Show GitHub Exploit DB Packet Storm
257484 5 警告 アップル - Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1800 2010-09-8 15:51 2010-08-25 Show GitHub Exploit DB Packet Storm
257485 6.8 警告 アップル - Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1808 2010-09-8 15:51 2010-08-25 Show GitHub Exploit DB Packet Storm
257486 6.2 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット
- sudo の secure path 機能における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1646 2010-09-8 15:50 2010-06-7 Show GitHub Exploit DB Packet Storm
257487 6.9 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット
- sudo における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-1163 2010-09-8 15:50 2010-04-16 Show GitHub Exploit DB Packet Storm
257488 10 危険 ESET
アップル
ClamAV
ソースネクスト
- 複数のアンチウィルス製品に脆弱性 CWE-noinfo
情報不足
CVE-2010-0098 2010-09-8 15:50 2010-04-13 Show GitHub Exploit DB Packet Storm
257489 7.5 危険 The PHP Group
アップル
- PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1129 2010-09-8 15:49 2010-03-26 Show GitHub Exploit DB Packet Storm
257490 4.4 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット
- sudo における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0427 2010-09-8 15:49 2010-02-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266461 8.1 HIGH
Network
mozilla firefox Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability affects Firefox < 50.1. CWE-416
 Use After Free
CVE-2016-9896 2024-11-21 12:01 2018-06-12 Show GitHub Exploit DB Packet Storm
266462 6.1 MEDIUM
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and… CWE-254
 7PK - Security Features
CVE-2016-9895 2024-11-21 12:01 2018-06-12 Show GitHub Exploit DB Packet Storm
266463 7.5 HIGH
Network
mozilla firefox A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a potentially exploitable crash. This vulnerability affects F… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-9894 2024-11-21 12:01 2018-06-12 Show GitHub Exploit DB Packet Storm
266464 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbit… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-9893 2024-11-21 12:01 2018-06-12 Show GitHub Exploit DB Packet Storm
266465 6.1 MEDIUM
Network
manageengine applications_manager ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from a Reflected Cross-Site Scripting vulnerability. Applications Manager is prone to a Cross-Site Scripting vulnerabili… CWE-79
Cross-site Scripting
CVE-2016-9490 2024-11-21 12:01 2018-06-5 Show GitHub Exploit DB Packet Storm
266466 9.8 CRITICAL
Network
manageengine applications_manager ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerSer… CWE-89
SQL Injection
CVE-2016-9488 2024-11-21 12:01 2018-06-5 Show GitHub Exploit DB Packet Storm
266467 8.8 HIGH
Network
qemu
debian
qemu
debian_linux
Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder … CWE-59
Link Following
CVE-2016-9602 2024-11-21 12:01 2018-04-27 Show GitHub Exploit DB Packet Storm
266468 6.5 MEDIUM
Network
openstack
redhat
puppet-swift
openstack
puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage (swift). During installation, the Puppet s… CWE-200
Information Exposure
CVE-2016-9590 2024-11-21 12:01 2018-04-27 Show GitHub Exploit DB Packet Storm
266469 8.1 HIGH
Network
redhat
ansible
ansible
openstack
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed … CWE-20
 Improper Input Validation 
CVE-2016-9587 2024-11-21 12:01 2018-04-25 Show GitHub Exploit DB Packet Storm
266470 5.5 MEDIUM
Local
artifex
debian
gpl_ghostscript
debian_linux
jbig2dec
ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode halftone segments in a J… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-9601 2024-11-21 12:01 2018-04-24 Show GitHub Exploit DB Packet Storm