Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258011	4.3	警告	Webmin Project オラクル	-	Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4568	2010-12-21 15:14	2010-01-5	Show	GitHub Exploit DB Packet Storm

258012	6.8	警告	富士通	-	Interstage Application Server における許可されていない IP アドレスからのリクエストのアクセスを許可する脆弱性	CWE-noinfo 情報不足	-	2010-12-21 14:14	2010-11-19	Show	GitHub Exploit DB Packet Storm

258013	8.3	危険	日立	-	日立の Groupmax 関連製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-12-21 14:06	2010-11-17	Show	GitHub Exploit DB Packet Storm

258014	4.3	警告	The PHP Group アップルサイバートラスト株式会社レッドハット	-	PHP の var_export 関数における、重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2531	2010-12-20 16:08	2010-07-22	Show	GitHub Exploit DB Packet Storm

258015	4.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Hypervisor の命令のエミュレーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0435	2010-12-20 16:01	2010-08-19	Show	GitHub Exploit DB Packet Storm

258016	5	警告	レッドハット Pidgin オラクル	-	Pidgin の MSN プロトコルプラグインの msn_emoticon_msg 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1624	2010-12-20 16:00	2010-05-12	Show	GitHub Exploit DB Packet Storm

258017	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックス日立	-	Apache HTTP Server の 413 エラーメッセージにおける HTTP メソッドを適切に検査しない問題	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6203	2010-12-20 15:38	2007-12-3	Show	GitHub Exploit DB Packet Storm

258018	4.3	警告	シマンテック	-	PGP Desktop にデータインジェクションの脆弱性	CWE-310 暗号の問題	CVE-2010-3618	2010-12-20 14:44	2010-11-19	Show	GitHub Exploit DB Packet Storm

258019	6.8	警告	アップル	-	Apple iOS の Telephony 内にある GSM 方式の通信管理の実装におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3832	2010-12-20 14:39	2010-11-26	Show	GitHub Exploit DB Packet Storm

258020	4.3	警告	アップル	-	Apple iOS の Photos における MobileMe アカウントのパスワードを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-3831	2010-12-20 14:32	2010-11-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
272441	7.5	HIGH Network	fedoraproject pgpdump_project	fedora pgpdump	The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop and CPU consumption) via crafted input, as demonstrated by t…	CWE-399 Resource Management Errors	CVE-2016-4021	2024-11-21 11:51	2016-05-26	Show	GitHub Exploit DB Packet Storm

272442	6.5	MEDIUM Local	qemu canonical debian redhat	qemu ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server openstack enterprise_linux_server_aus enterprise_linux_eus ente…	The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory …	NVD-CWE-noinfo	CVE-2016-4020	2024-11-21 11:51	2016-05-26	Show	GitHub Exploit DB Packet Storm

272443	8.1	HIGH Network	huawei	s12700_firmware s5700_firmware	Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of se…	CWE-20 Improper Input Validation	CVE-2016-4087	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

272444	7.5	HIGH Network	quagga opensuse	quagga leap opensuse	The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and d…	CWE-20 Improper Input Validation	CVE-2016-4049	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

272445	6.0	MEDIUM Local	fedoraproject canonical qemu debian	fedora ubuntu_linux qemu debian_linux	The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous tra…	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4037	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

272446	8.6	HIGH Network	qemu canonical fedoraproject debian	qemu ubuntu_linux fedora debian_linux	Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cau…	CWE-120 Classic Buffer Overflow	CVE-2016-4001	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

272447	7.5	HIGH Network	opensuse golang fedoraproject	leap go fedora	The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a …	CWE-20 Improper Input Validation	CVE-2016-3959	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

272448	7.8	HIGH Local	golang	go	Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-3958	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

272449	9.8	CRITICAL Network	php opensuse	php leap opensuse	Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string,…	CWE-190 Integer Overflow or Wraparound	CVE-2016-4346	2024-11-21 11:51	2016-05-22	Show	GitHub Exploit DB Packet Storm

272450	9.8	CRITICAL Network	php	php	Integer overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other i…	CWE-190 Integer Overflow or Wraparound	CVE-2016-4345	2024-11-21 11:51	2016-05-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed