Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258411	6.8	警告	Haxx アップル VMware サイバートラスト株式会社レッドハット	-	libcurl の content_encoding.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0734	2011-02-28 14:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

258412	4.3	警告	VMware OpenSSL Project	-	OpenSSL クライアントの ssl3_get_key_exchange 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2939	2011-02-28 14:39	2010-08-17	Show	GitHub Exploit DB Packet Storm

258413	10	危険	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	複数の Oracle 製品の Java Deployment Toolkit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0886	2011-02-28 14:16	2010-04-15	Show	GitHub Exploit DB Packet Storm

258414	8.3	危険	インターネットイニシアティブ	-	SEIL シリーズにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0454	2011-02-28 12:08	2011-02-28	Show	GitHub Exploit DB Packet Storm

258415	6.8	警告	Google	-	OpenCORE の Huffman デコーディング機能における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0475	2011-02-25 14:13	2009-02-17	Show	GitHub Exploit DB Packet Storm

258416	7.2	危険	Google	-	T-Mobile G1 phone 上で稼働する Open Handset Alliance Android の link_image 関数における任意のファイルを作成される脆弱性	CWE-20 不適切な入力確認	CVE-2009-0606	2011-02-25 14:11	2009-02-17	Show	GitHub Exploit DB Packet Storm

258417	5	警告	シスコシステムズ	-	Cisco IOS 上で稼働する STCAPP におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-4687	2011-02-25 14:07	2011-01-7	Show	GitHub Exploit DB Packet Storm

258418	7.8	危険	シスコシステムズ	-	Cisco IOS 上で稼働する CallManager Express におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4686	2011-02-25 14:05	2011-01-7	Show	GitHub Exploit DB Packet Storm

258419	4	警告	シスコシステムズ	-	Cisco IOS における証明書マップによる制限を回避される脆弱性	CWE-310 暗号の問題	CVE-2010-4685	2011-02-25 14:03	2011-01-7	Show	GitHub Exploit DB Packet Storm

258420	7.1	危険	シスコシステムズ	-	Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4684	2011-02-25 14:00	2011-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267961	8.8	HIGH Network	theforeman redhat	foreman satellite	foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those …	CWE-255 Credentials Management	CVE-2016-9593	2024-11-21 12:01	2018-04-17	Show	GitHub Exploit DB Packet Storm

267962	4.3	MEDIUM Network	redhat	openshift	openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since the delete operation…	CWE-399 Resource Management Errors	CVE-2016-9592	2024-11-21 12:01	2018-04-17	Show	GitHub Exploit DB Packet Storm

267963	5.3	MEDIUM Network	ikiwiki debian	ikiwiki debian_linux	ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata fo…	CWE-287 Improper Authentication	CVE-2016-9646	2024-11-21 12:01	2018-04-14	Show	GitHub Exploit DB Packet Storm

267964	6.5	MEDIUM Network	ikiwiki	ikiwiki	The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229.	CWE-284 Improper Access Control	CVE-2016-9645	2024-11-21 12:01	2018-04-11	Show	GitHub Exploit DB Packet Storm

267965	5.3	MEDIUM Network	ibm	cognos_analytics	IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an attacker in further attacks against the system. IBM X-Force …	CWE-200 Information Exposure	CVE-2016-9711	2024-11-21 12:01	2018-03-22	Show	GitHub Exploit DB Packet Storm

267966	9.8	CRITICAL Network	pivotal_software	gemfire_for_pivotal_cloud_foundry	The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed b…	CWE-287 Improper Authentication	CVE-2016-9880	2024-11-21 12:01	2018-03-17	Show	GitHub Exploit DB Packet Storm

267967	6.3	MEDIUM Network	freeipa	freeipa	Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, un…	CWE-285 Improper Authorization	CVE-2016-9575	2024-11-21 12:01	2018-03-13	Show	GitHub Exploit DB Packet Storm

267968	6.5	MEDIUM Network	jasper_project canonical redhat	jasper ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_…	JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer t…	CWE-476 NULL Pointer Dereference	CVE-2016-9600	2024-11-21 12:01	2018-03-13	Show	GitHub Exploit DB Packet Storm

267969	7.5	HIGH Network	redhat	jboss_wildfly_application_server	Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections.…	CWE-400 Uncontrolled Resource Consumption	CVE-2016-9589	2024-11-21 12:01	2018-03-13	Show	GitHub Exploit DB Packet Storm

267970	8.1	HIGH Network	redhat	resteasy	JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitra…	CWE-20 Improper Input Validation	CVE-2016-9606	2024-11-21 12:01	2018-03-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed