Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258011	6.8	警告	w3m project ターボリナックスサイバートラスト株式会社レッドハット	-	w3m のistream.c における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2074	2010-09-27 16:24	2010-06-16	Show	GitHub Exploit DB Packet Storm

258012	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックス OpenLDAP Foundation	-	OpenLDAP における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3767	2010-09-27 16:23	2009-10-23	Show	GitHub Exploit DB Packet Storm

258013	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3021	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

258014	5	警告	Opera Software ASA	-	Opera の news-feed プレビュー機能における任意のフィードの購読を強制される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3020	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

258015	9.3	危険	Opera Software ASA	-	Opera におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3019	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

258016	9.3	危険	Opera Software ASA	-	Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2666	2010-09-27 16:20	2010-06-21	Show	GitHub Exploit DB Packet Storm

258017	4.3	警告	Opera Software ASA	-	Opera における URI の処理に関するクロスサイトスクリプティングの脆弱性\	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2665	2010-09-27 16:20	2010-06-21	Show	GitHub Exploit DB Packet Storm

258018	4.3	警告	Opera Software ASA	-	Opera の HTML コンテンツにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2664	2010-09-27 16:20	2010-07-1	Show	GitHub Exploit DB Packet Storm

258019	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2663	2010-09-27 16:20	2010-07-1	Show	GitHub Exploit DB Packet Storm

258020	4.3	警告	Opera Software ASA	-	Opera におけるポップアップブロッカーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2662	2010-09-27 16:20	2010-07-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273171	9.8	CRITICAL Network	google	android	libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not prevent free operations on uninitialized memory, which …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2429	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

273172	9.8	CRITICAL Network	google	android	libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2428	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

273173	7.8	HIGH Local	accellion	file_transfer_appliance	The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, and consequently gain privileges, via unspecified vectors.	CWE-264 NVD-CWE-Other Permissions, Privileges, and Access Controls	CVE-2016-2353	2024-11-21 11:48	2016-05-7	Show	GitHub Exploit DB Packet Storm

273174	8.8	HIGH Network	accellion	file_transfer_appliance	The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2352	2024-11-21 11:48	2016-05-7	Show	GitHub Exploit DB Packet Storm

273175	9.8	CRITICAL Network	accellion	file_transfer_appliance	SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote attackers to execute arbitrary SQL commands via the …	CWE-89 SQL Injection	CVE-2016-2351	2024-11-21 11:48	2016-05-7	Show	GitHub Exploit DB Packet Storm

273176	6.1	MEDIUM Network	accellion	file_transfer_appliance	Multiple cross-site scripting (XSS) vulnerabilities on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allow remote attackers to inject arbitrary web script or HTML via unspecified inp…	CWE-79 Cross-site Scripting	CVE-2016-2350	2024-11-21 11:48	2016-05-7	Show	GitHub Exploit DB Packet Storm

273177	7.8	HIGH Local	linux	linux_kernel	The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.	CWE-269 Improper Privilege Management	CVE-2016-2854	2024-11-21 11:48	2016-05-2	Show	GitHub Exploit DB Packet Storm

273178	7.8	HIGH Local	linux	linux_kernel	The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem…	CWE-269 Improper Privilege Management	CVE-2016-2853	2024-11-21 11:48	2016-05-2	Show	GitHub Exploit DB Packet Storm

273179	4.6	MEDIUM Physics	novell linux canonical	suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_real_time_extension suse_linux_enterprise_desktop s…	The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system c…	NVD-CWE-Other	CVE-2016-2188	2024-11-21 11:48	2016-05-2	Show	GitHub Exploit DB Packet Storm

273180	4.3	MEDIUM Network	mozilla	firefox	The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify…	CWE-284 Improper Access Control	CVE-2016-2820	2024-11-21 11:48	2016-05-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed