Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259311	9.3	危険	アップル	-	Apple Safari の ColorSync における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0040	2010-04-27 15:20	2010-03-15	Show	GitHub Exploit DB Packet Storm

259312	4	警告	Squid-cache.org サイバートラスト株式会社ターボリナックスレッドハット	-	Squid の lib/rfc1035.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0308	2010-04-27 15:20	2010-01-28	Show	GitHub Exploit DB Packet Storm

259313	6.8	警告	アップル	-	Apple Mac OS X の QuickDraw Manager におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2837	2010-04-27 15:20	2009-11-9	Show	GitHub Exploit DB Packet Storm

259314	5	警告	Squid-cache.org サイバートラスト株式会社ターボリナックスレッドハット	-	Squid の strListGetItem 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2855	2010-04-27 15:19	2009-08-18	Show	GitHub Exploit DB Packet Storm

259315	4.3	警告	アップルサイバートラスト株式会社 LibTIFF サン・マイクロシステムズレッドハット	-	libtiff の LZWDecodeCompat 関数におけるバッファアンダーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2285	2010-04-27 15:19	2009-07-1	Show	GitHub Exploit DB Packet Storm

259316	4.3	警告	サイバートラスト株式会社レッドハット	-	Red Hat および MIRACLE LINUX の sendmail におけるメール送信元を偽装される脆弱性	-	CVE-2006-7176	2010-04-27 15:18	2007-03-27	Show	GitHub Exploit DB Packet Storm

259317	6.9	警告	アップル	-	Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0532	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

259318	4.3	警告	アップル	-	Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0531	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

259319	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0536	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

259320	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0529	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270931	6.1	MEDIUM Network	apache	sling	In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the XSSAPI.encodeForJSString() method is not restrictive enough and for some input patterns allows script tags to …	CWE-79 Cross-site Scripting	CVE-2016-5394	2024-11-21 11:54	2017-07-20	Show	GitHub Exploit DB Packet Storm

270932	7.5	HIGH Network	freeipa	freeipa	FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.	CWE-284 Improper Access Control	CVE-2016-5414	2024-11-21 11:54	2017-06-28	Show	GitHub Exploit DB Packet Storm

270933	7.5	HIGH Network	libreswan fedoraproject	libreswan fedora	libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart).	CWE-476 NULL Pointer Dereference	CVE-2016-5391	2024-11-21 11:54	2017-06-14	Show	GitHub Exploit DB Packet Storm

270934	9.8	CRITICAL Network	redhat	quickstart_cloud_installer	/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and contains the root password of the deployed system.	CWE-255 Credentials Management	CVE-2016-5411	2024-11-21 11:54	2017-06-14	Show	GitHub Exploit DB Packet Storm

270935	5.3	MEDIUM Network	acer	acer_portal	Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate.	CWE-295 Improper Certificate Validation	CVE-2016-5648	2024-11-21 11:54	2017-06-9	Show	GitHub Exploit DB Packet Storm

270936	7.5	HIGH Network	redhat	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node	389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstat…	CWE-200 Information Exposure	CVE-2016-5416	2024-11-21 11:54	2017-06-9	Show	GitHub Exploit DB Packet Storm

270937	9.8	CRITICAL Network	redhat	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node	389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstat…	CWE-199 Information Management Errors	CVE-2016-5405	2024-11-21 11:54	2017-06-9	Show	GitHub Exploit DB Packet Storm

270938	7.8	HIGH Local	pngquant	pngquant	Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow.	CWE-190 Integer Overflow or Wraparound	CVE-2016-5735	2024-11-21 11:54	2017-05-23	Show	GitHub Exploit DB Packet Storm

270939	7.8	HIGH Local	php	php	The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary co…	CWE-787 Out-of-bounds Write	CVE-2016-5399	2024-11-21 11:54	2017-04-22	Show	GitHub Exploit DB Packet Storm

270940	2.8	LOW Local	oracle	solaris_cluster	Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The supported version that is affected is 4.3. Easily "exploitable" vulnerabil…	CWE-284 Improper Access Control	CVE-2016-5551	2024-11-21 11:54	2017-04-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed