Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258731	2.1	注意	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox の JavaScript インプリメンテーションにおける偽装したポップアップメッセージに従って行動させられる脆弱性	CWE-Other その他	CVE-2008-5913	2010-07-15 17:20	2009-01-20	Show	GitHub Exploit DB Packet Storm

258732	7.4	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 の rename_principal_2_svc() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2798	2010-07-15 17:20	2007-06-26	Show	GitHub Exploit DB Packet Storm

258733	7.9	危険	日本電気サイバートラスト株式会社 MIT Kerberos ヒューレット・パッカードターボリナックスレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc_svcauth_unix() 関数における任意のコードを実行される脆弱性	-	CVE-2007-2443	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

258734	9.3	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性	-	CVE-2007-2442	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

258735	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2277	2010-07-14 17:27	2010-03-29	Show	GitHub Exploit DB Packet Storm

258736	6.9	警告	VMware	-	複数の VMware 製品の USB サービスにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1140	2010-07-14 17:27	2010-04-9	Show	GitHub Exploit DB Packet Storm

258737	9.3	危険	シマンテック	-	Symantec Workspace Streaming (旧 Symantec AppStream) に脆弱性	CWE-287 不適切な認証	CVE-2008-4389	2010-07-14 17:26	2010-06-22	Show	GitHub Exploit DB Packet Storm

258738	5.8	警告	アップル	-	Apple iOS の設定アプリケーションにおけるユーザを追跡可能な脆弱性	CWE-DesignError	CVE-2010-1756	2010-07-14 17:26	2010-06-22	Show	GitHub Exploit DB Packet Storm

258739	4.3	警告	アップル	-	Apple iOS の Safari におけるリモートの Web サーバがユーザを追跡可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1755	2010-07-14 17:25	2010-06-22	Show	GitHub Exploit DB Packet Storm

258740	1.9	注意	アップル	-	Apple iOS のパスコードロックにおける任意のデータにアクセスされる脆弱性	CWE-362 競合状態	CVE-2010-1775	2010-07-14 17:25	2010-06-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270471	7.8	HIGH Local	symantec	norton_antivirus norton_family norton_antivirus_with_backup norton_security norton_360 norton_internet_security norton_security_with_backup endpoint_protection endpoint_protec…	A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Pr…	CWE-427 Uncontrolled Search Path Element	CVE-2016-5311	2024-11-21 11:54	2020-01-10	Show	GitHub Exploit DB Packet Storm

270472	5.5	MEDIUM Local	google	android	An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when processing an accept system call by the user process on AF_M…	CWE-200 Information Exposure	CVE-2016-5346	2024-11-21 11:54	2020-01-9	Show	GitHub Exploit DB Packet Storm

270473	7.5	HIGH Network	cloudera	cdh	Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.	CWE-200 Information Exposure	CVE-2016-5724	2024-11-21 11:54	2019-11-26	Show	GitHub Exploit DB Packet Storm

270474	7.5	HIGH Network	php_jose_project	php_jose	The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2016-5431	2024-11-21 11:54	2019-08-8	Show	GitHub Exploit DB Packet Storm

270475	8.8	HIGH Network	redhat	cloudforms cloudforms_management_engine	A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could us…	-	CVE-2016-5402	2024-11-21 11:54	2018-10-31	Show	GitHub Exploit DB Packet Storm

270476	9.8	CRITICAL Network	netgear	dgn2200_firmware dgnd3700_firmware	A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to acces…	CWE-200 Information Exposure	CVE-2016-5649	2024-11-21 11:54	2018-07-25	Show	GitHub Exploit DB Packet Storm

270477	7.5	HIGH Network	netgear	wndr4500_firmware	There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even w…	CWE-200 Information Exposure	CVE-2016-5638	2024-11-21 11:54	2018-07-25	Show	GitHub Exploit DB Packet Storm

270478	7.5	HIGH Network	mozilla	firefox	A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affects Firefox for Androi…	CWE-275 Permission Issues	CVE-2016-5299	2024-11-21 11:54	2018-06-12	Show	GitHub Exploit DB Packet Storm

270479	6.5	MEDIUM Network	mozilla	firefox	A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when the new page is loaded. Note: this issue only affects Firefo…	CWE-20 Improper Input Validation	CVE-2016-5298	2024-11-21 11:54	2018-06-12	Show	GitHub Exploit DB Packet Storm

270480	9.8	CRITICAL Network	mozilla debian	firefox thunderbird firefox_esr debian_linux	An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Fire…	CWE-190 Integer Overflow or Wraparound	CVE-2016-5297	2024-11-21 11:54	2018-06-12	Show	GitHub Exploit DB Packet Storm