Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257811	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0192	2010-04-28 15:57	2010-04-13	Show	GitHub Exploit DB Packet Storm

257812	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0191	2010-04-28 15:56	2010-04-13	Show	GitHub Exploit DB Packet Storm

257813	4.3	警告	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0190	2010-04-28 15:56	2010-04-13	Show	GitHub Exploit DB Packet Storm

257814	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4537	2010-04-28 15:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

257815	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスレッドハット	-	Apache の mod_proxy_ftp における UTF-7 エンコードに関するクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0005	2010-04-28 15:18	2008-01-11	Show	GitHub Exploit DB Packet Storm

257816	10	危険	IntelliCom Innovation AB	-	IntelliCom NetBiter デバイスにおけるデフォルトパスワードの問題	CWE-255 証明書・パスワード管理	CVE-2009-4463	2010-04-27 16:10	2010-04-7	Show	GitHub Exploit DB Packet Storm

257817	9.3	危険	Foxit Software Inc	-	Foxit Reader に任意のコード実行が可能な脆弱性	CWE-94 コード・インジェクション	CVE-2010-1239	2010-04-27 16:10	2010-04-6	Show	GitHub Exploit DB Packet Storm

257818	10	危険	ヒューレット・パッカード	-	Broadcom NetXtreme 管理用ファームウェアにバッファオーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2010-0104	2010-04-27 16:09	2010-03-31	Show	GitHub Exploit DB Packet Storm

257819	6.8	警告	アップル	-	AirPort Utility におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2822	2010-04-27 16:09	2010-03-31	Show	GitHub Exploit DB Packet Storm

257820	9.3	危険	アップル	-	Apple Safari の ColorSync における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0040	2010-04-27 15:20	2010-03-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268351	7.5	HIGH Network	epic	mychart	XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.as…	CWE-91 Blind XPath Injection	CVE-2016-6272	2024-11-21 11:55	2018-02-21	Show	GitHub Exploit DB Packet Storm

268352	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentiall…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-6169	2024-11-21 11:55	2018-02-8	Show	GitHub Exploit DB Packet Storm

268353	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a …	CWE-416 Use After Free	CVE-2016-6168	2024-11-21 11:55	2018-02-8	Show	GitHub Exploit DB Packet Storm

268354	6.1	MEDIUM Network	sophos	puremessage	Cross-site scripting (XSS) vulnerability in Sophos PureMessage for UNIX before 6.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2016-6217	2024-11-21 11:55	2018-01-27	Show	GitHub Exploit DB Packet Storm

268355	4.3	MEDIUM Network	ibm	rational_quality_manager rational_team_concert rational_doors_next_generation rational_engineering_lifecycle_manager rational_rhapsody_design_manager rational_software_architect_design…	IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages. IBM X-Force ID: 116868.	CWE-200 Information Exposure	CVE-2016-6024	2024-11-21 11:55	2017-11-28	Show	GitHub Exploit DB Packet Storm

268356	9.8	CRITICAL Network	jantek	jtc-200_firmware	An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service witho…	CWE-287 Improper Authentication	CVE-2016-5791	2024-11-21 11:55	2017-10-13	Show	GitHub Exploit DB Packet Storm

268357	8.0	HIGH Network	jantek	jtc-200_firmware	A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active sess…	CWE-352 Origin Validation Error	CVE-2016-5789	2024-11-21 11:55	2017-10-13	Show	GitHub Exploit DB Packet Storm

268358	7.0	HIGH Local	google	android	drivers/net/ethernet/msm/rndis_ipa.c in the Qualcomm networking driver in Android allows remote attackers to execute arbitrary code via a crafted application compromising a privileged process.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-5868	2024-11-21 11:55	2017-09-26	Show	GitHub Exploit DB Packet Storm

268359	7.3	HIGH Network	automatedlogic carrier	i-vu sitescan_web automatedlogic_webctrl	An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker cou…	CWE-611 XXE	CVE-2016-5795	2024-11-21 11:55	2017-09-1	Show	GitHub Exploit DB Packet Storm

268360	7.5	HIGH Network	westermo	mrd-305-din_firmware mrd-315-din_firmware mrd-355-din_firmware mrd-455-din_firmware	A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded privat…	CWE-798 Use of Hard-coded Credentials	CVE-2016-5816	2024-11-21 11:55	2017-08-26	Show	GitHub Exploit DB Packet Storm