Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257561	7.2	危険	VMware	-	複数の VMware 製品の仮想マシン通信インターフェイスにおける権限昇格の脆弱性	CWE-noinfo 情報不足	CVE-2009-1147	2010-03-24 12:21	2009-04-3	Show	GitHub Exploit DB Packet Storm

257562	4.9	警告	VMware	-	複数の VMware 製品の ioctl におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-1146	2010-03-23 14:11	2010-04-3	Show	GitHub Exploit DB Packet Storm

257563	6.8	警告	VMware	-	複数の VMware 製品の VNnc コーデックにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0910	2010-03-23 14:11	2010-04-3	Show	GitHub Exploit DB Packet Storm

257564	9.3	危険	VMware	-	複数の VMware 製品の VNnc コーデックにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0909	2010-03-23 14:10	2010-04-3	Show	GitHub Exploit DB Packet Storm

257565	6.4	警告	VMware	-	VMware ACE の ACE 共有フォルダ実装における無効にされた共有フォルダを有効にされる脆弱性	CWE-noinfo 情報不足	CVE-2009-0908	2010-03-23 14:10	2010-04-3	Show	GitHub Exploit DB Packet Storm

257566	2.1	注意	VMware	-	複数の VMware 製品の VI Client におけるパスワードを取得される脆弱性	CWE-200 情報漏えい	CVE-2009-0518	2010-03-23 14:10	2010-04-3	Show	GitHub Exploit DB Packet Storm

257567	4.4	警告	KVM レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0419	2010-03-23 14:09	2010-03-1	Show	GitHub Exploit DB Packet Storm

257568	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0263	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

257569	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0262	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

257570	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0261	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270181	5.5	MEDIUM Local	foxitsoftware	foxit_reader phantompdf	Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a denial of service (application hang) via a crafted PDF.	CWE-19 Data Processing Errors	CVE-2016-4062	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

270182	7.5	HIGH Network	foxitsoftware	foxit_reader phantompdf	Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream.	CWE-20 Improper Input Validation	CVE-2016-4061	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

270183	7.5	HIGH Network	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service (application crash) via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-4060	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

270184	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document.	NVD-CWE-Other	CVE-2016-4059	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

270185	5.5	MEDIUM Local	opensuse giflib_project	opensuse giflib	Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3977	2024-11-21 11:51	2016-04-21	Show	GitHub Exploit DB Packet Storm

270186	7.2	HIGH Network	dotcms	dotcms	SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter.	CWE-89 SQL Injection	CVE-2016-4040	2024-11-21 11:51	2016-04-19	Show	GitHub Exploit DB Packet Storm

270187	8.8	HIGH Local	xen fedoraproject oracle	xen fedora vm_server	Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping.	CWE-264 NVD-CWE-Other Permissions, Privileges, and Access Controls	CVE-2016-3960	2024-11-21 11:51	2016-04-19	Show	GitHub Exploit DB Packet Storm

270188	2.7	LOW Network	dotcms	dotcms	Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the fileName parameter.	CWE-22 Path Traversal	CVE-2016-3972	2024-11-21 11:51	2016-04-19	Show	GitHub Exploit DB Packet Storm

270189	4.8	MEDIUM Network	dotcms	dotcms	Cross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to c/portal/layout.	CWE-79 Cross-site Scripting	CVE-2016-3971	2024-11-21 11:51	2016-04-19	Show	GitHub Exploit DB Packet Storm

270190	5.5	MEDIUM Local	opensuse	leap opensuse	The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-4036	2024-11-21 11:51	2016-04-18	Show	GitHub Exploit DB Packet Storm