Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258931 7.5 危険 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 MMR デコーダにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1182 2010-05-26 16:30 2009-04-16 Show GitHub Exploit DB Packet Storm
258932 5 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-1181 2010-05-26 16:29 2009-04-16 Show GitHub Exploit DB Packet Storm
258933 6.8 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2009-1180 2010-05-26 16:29 2009-04-16 Show GitHub Exploit DB Packet Storm
258934 6.8 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
アップル
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-1179 2010-05-26 16:29 2009-04-16 Show GitHub Exploit DB Packet Storm
258935 6.8 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2009-0800 2010-05-26 16:29 2009-04-16 Show GitHub Exploit DB Packet Storm
258936 4.3 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-0799 2010-05-26 16:28 2009-04-16 Show GitHub Exploit DB Packet Storm
258937 6.9 警告 レッドハット - RHEL の Linux kernel 用の特定のレッドハットパッチにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0729 2010-05-25 16:05 2010-03-16 Show GitHub Exploit DB Packet Storm
258938 4 警告 IBM - IBM DB2 の REPEAT 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1560 2010-05-24 18:34 2010-04-27 Show GitHub Exploit DB Packet Storm
258939 4 警告 サン・マイクロシステムズ - Sun Solaris における lx ブランドゾーンに関するサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-4774 2010-05-24 18:33 2009-09-9 Show GitHub Exploit DB Packet Storm
258940 6.9 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット
- sudo における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0426 2010-05-21 18:23 2010-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247101 8.8 HIGH
Network
versa-networks versa_operating_system In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user successfully logs into the application. Failing to issue a new… CWE-384
 Session Fixation
CVE-2018-16495 2024-11-21 12:52 2021-05-27 Show GitHub Exploit DB Packet Storm
247102 8.8 HIGH
Network
versa-networks versa_operating_system In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or executi… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2018-16494 2024-11-21 12:52 2021-05-27 Show GitHub Exploit DB Packet Storm
247103 5.4 MEDIUM
Network
solarwinds database_performance_analyzer SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen, userAdministration.iwc, database.iwc, a… CWE-79
Cross-site Scripting
CVE-2018-16243 2024-11-21 12:52 2020-12-16 Show GitHub Exploit DB Packet Storm
247104 9.8 CRITICAL
Network
pbootcms pbootcms An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter. CWE-89
SQL Injection
CVE-2018-16357 2024-11-21 12:52 2020-03-3 Show GitHub Exploit DB Packet Storm
247105 9.8 CRITICAL
Network
pbootcms pbootcms An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter. CWE-89
SQL Injection
CVE-2018-16356 2024-11-21 12:52 2020-03-3 Show GitHub Exploit DB Packet Storm
247106 9.8 CRITICAL
Network
samsung galaxy_gear_firmware
gear_2_firmware
gear_live_firmware
gear_s_firmware
gear_s2_firmware
gear_s3_firmware
gear_sport_firmware
gear_fit_firmware
gear_fit_2_firmware
gear_fit…
The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack of its D-Bus security policy configurations. This … CWE-269
 Improper Privilege Management
CVE-2018-16272 2024-11-21 12:52 2020-01-22 Show GitHub Exploit DB Packet Storm
247107 6.5 MEDIUM
Adjacent
samsung galaxy_gear_firmware
gear_2_firmware
gear_live_firmware
gear_s_firmware
gear_s2_firmware
gear_s3_firmware
gear_sport_firmware
gear_fit_firmware
gear_fit_2_firmware
gear_fit…
The wemail_consumer_service (from the built-in application wemail) in Samsung Galaxy Gear series allows an unprivileged process to manipulate a user's mailbox, due to improper D-Bus security policy c… CWE-269
 Improper Privilege Management
CVE-2018-16271 2024-11-21 12:52 2020-01-22 Show GitHub Exploit DB Packet Storm
247108 7.5 HIGH
Network
samsung galaxy_gear_firmware
gear_2_firmware
gear_live_firmware
gear_s_firmware
gear_s2_firmware
gear_s3_firmware
gear_sport_firmware
gear_fit_firmware
gear_fit_2_firmware
gear_fit…
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary… CWE-269
 Improper Privilege Management
CVE-2018-16270 2024-11-21 12:52 2020-01-22 Show GitHub Exploit DB Packet Storm
247109 7.5 HIGH
Network
samsung galaxy_gear_firmware
gear_2_firmware
gear_live_firmware
gear_s_firmware
gear_s2_firmware
gear_s3_firmware
gear_sport_firmware
gear_fit_firmware
gear_fit_2_firmware
gear_fit…
The wnoti system service in Samsung Galaxy Gear series allows an unprivileged process to take over the internal notification message data, due to improper D-Bus security policy configurations. This a… CWE-200
Information Exposure
CVE-2018-16269 2024-11-21 12:52 2020-01-22 Show GitHub Exploit DB Packet Storm
247110 4.3 MEDIUM
Adjacent
linux tizen The SoundServer/FocusServer system services in Tizen allow an unprivileged process to perform media-related system actions, due to improper D-Bus security policy configurations. Such actions include … CWE-269
 Improper Privilege Management
CVE-2018-16268 2024-11-21 12:52 2020-01-22 Show GitHub Exploit DB Packet Storm