Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259031	4.3	警告	Mozilla Foundation レッドハット	-	複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0171	2010-04-5 14:54	2010-03-23	Show	GitHub Exploit DB Packet Storm

259032	4.3	警告	Mozilla Foundation	-	Mozilla Firefox における同一生成元ポリシーを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0170	2010-04-5 14:53	2010-03-23	Show	GitHub Exploit DB Packet Storm

259033	7.5	危険	Heartlogic	-	HL-SiteManager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1331	2010-04-2 15:02	2010-04-2	Show	GitHub Exploit DB Packet Storm

259034	9.3	危険	Mozilla Foundation	-	Mozilla Firefox の Web Open Fonts Format デコーダにおける整数オーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2010-1028	2010-04-2 14:05	2010-03-19	Show	GitHub Exploit DB Packet Storm

259035	5	警告	富士通アクセラテクノロジ	-	Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性	CWE-200 情報漏えい	-	2010-04-2 14:05	2010-03-10	Show	GitHub Exploit DB Packet Storm

259036	1.9	注意	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3556	2010-04-2 14:02	2010-01-19	Show	GitHub Exploit DB Packet Storm

259037	10	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-4538	2010-04-2 14:02	2010-01-12	Show	GitHub Exploit DB Packet Storm

259038	6.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3939	2010-04-2 14:00	2009-11-16	Show	GitHub Exploit DB Packet Storm

259039	6.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel におけるドライバの動作およびログレベルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3889	2010-04-2 14:00	2009-11-16	Show	GitHub Exploit DB Packet Storm

259040	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の hfs サブシステムにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4020	2010-04-2 13:59	2009-12-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268281	9.8	CRITICAL Network	foscam	c1_webcam_firmware	Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not hav…	CWE-798 Use of Hard-coded Credentials	CVE-2016-8731	2024-11-21 11:59	2017-06-22	Show	GitHub Exploit DB Packet Storm

268282	4.8	MEDIUM Network	apache	ranger	Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal us…	CWE-79 Cross-site Scripting	CVE-2016-8751	2024-11-21 11:59	2017-06-15	Show	GitHub Exploit DB Packet Storm

268283	5.9	MEDIUM Network	apache	ranger	Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.	CWE-426 Untrusted Search Path	CVE-2016-8746	2024-11-21 11:59	2017-06-15	Show	GitHub Exploit DB Packet Storm

268284	6.5	MEDIUM Network	cloudfoundry	capi-release cf-release	An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor role is over-privileged with the ability t…	CWE-269 Improper Privilege Management	CVE-2016-8219	2024-11-21 11:59	2017-06-13	Show	GitHub Exploit DB Packet Storm

268285	9.8	CRITICAL Network	cloudfoundry	cf-release routing-release	An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can all…	CWE-20 Improper Input Validation	CVE-2016-8218	2024-11-21 11:59	2017-06-13	Show	GitHub Exploit DB Packet Storm

268286	7.5	HIGH Network	lenovo	lenovo_service_bridge	In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificat…	CWE-295 Improper Certificate Validation	CVE-2016-8231	2024-11-21 11:59	2017-06-5	Show	GitHub Exploit DB Packet Storm

268287	7.5	HIGH Network	lenovo	lenovo_service_bridge	In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers.	CWE-200 Information Exposure	CVE-2016-8230	2024-11-21 11:59	2017-06-5	Show	GitHub Exploit DB Packet Storm

268288	8.8	HIGH Network	lenovo	lenovo_service_bridge	A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed.	CWE-352 Origin Validation Error	CVE-2016-8229	2024-11-21 11:59	2017-06-5	Show	GitHub Exploit DB Packet Storm

268289	7.8	HIGH Local	lenovo	lenovo_service_bridge	In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8228	2024-11-21 11:59	2017-06-5	Show	GitHub Exploit DB Packet Storm

268290	7.5	HIGH Network	apache	qpid_broker-j	The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user authentication. Among the choices are the SCRAM-SHA-1 and SCRAM-SHA-256 Authenticat…	CWE-200 Information Exposure	CVE-2016-8741	2024-11-21 11:59	2017-05-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed