Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259391	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の xfs_swapext 関数における読み込み権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2226	2011-03-3 13:28	2010-08-1	Show	GitHub Exploit DB Packet Storm

259392	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の mext_check_arguments 関数におけるファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2066	2011-03-3 13:26	2010-06-2	Show	GitHub Exploit DB Packet Storm

259393	6.5	警告	IBM	-	IBM DB2 における non-DDL ステートメントを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0757	2011-03-2 16:40	2011-01-28	Show	GitHub Exploit DB Packet Storm

259394	4.3	警告	シングス	-	複数のシングス CGI 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0455	2011-03-2 16:01	2011-03-2	Show	GitHub Exploit DB Packet Storm

259395	5	警告	The PHP Group	-	PHP の mt_rand 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0755	2011-03-1 15:57	2010-12-9	Show	GitHub Exploit DB Packet Storm

259396	4.4	警告	The PHP Group	-	PHP の SplFileInfo::getType 関数におけるシンボリックリンク攻撃の脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0754	2011-03-1 15:55	2010-12-9	Show	GitHub Exploit DB Packet Storm

259397	4.3	警告	The PHP Group	-	PHP の PCNTL 拡張におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2011-0753	2011-03-1 15:54	2010-12-9	Show	GitHub Exploit DB Packet Storm

259398	5	警告	The PHP Group	-	PHP の extract 関数におけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0752	2011-03-1 15:52	2010-12-8	Show	GitHub Exploit DB Packet Storm

259399	5	警告	日立	-	JP1/NETM/DM におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2011-03-1 15:26	2011-01-31	Show	GitHub Exploit DB Packet Storm

259400	7.5	危険	IBM	-	IBM DB2 の DB2 Administration Server コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0731	2011-03-1 15:17	2011-01-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276901	6.1	MEDIUM Network	sophos	unified_threat_management_software	Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.	CWE-79 Cross-site Scripting	CVE-2016-2046	2024-11-21 11:47	2016-02-18	Show	GitHub Exploit DB Packet Storm

276902	8.8	HIGH Network	mozilla	firefox	Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site tha…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-1949	2024-11-21 11:47	2016-02-13	Show	GitHub Exploit DB Packet Storm

276903	6.5	MEDIUM Network	xmlsoft debian canonical	libxml2 debian_linux ubuntu_linux	The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2073	2024-11-21 11:47	2016-02-13	Show	GitHub Exploit DB Packet Storm

276904	9.8	CRITICAL Network	hp	continuous_delivery_automation	HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.	CWE-94 Code Injection	CVE-2016-1986	2024-11-21 11:47	2016-02-12	Show	GitHub Exploit DB Packet Storm

276905	3.3	LOW Local	libdwarf_project	libdwarf	The dwarf_read_cie_fde_prefix function in dwarf_frame2.c in libdwarf 20151114 allows attackers to cause a denial of service (out-of-bounds read) via a crafted ELF object file.	CWE-125 Out-of-bounds Read	CVE-2016-2091	2024-11-21 11:47	2016-02-9	Show	GitHub Exploit DB Packet Storm

276906	6.5	MEDIUM Network	jasper_project	jasper	The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.	CWE-20 Improper Input Validation	CVE-2016-2089	2024-11-21 11:47	2016-02-9	Show	GitHub Exploit DB Packet Storm

276907	5.5	MEDIUM Network	djangoproject	django	Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option …	CWE-284 Improper Access Control	CVE-2016-2048	2024-11-21 11:47	2016-02-9	Show	GitHub Exploit DB Packet Storm

276908	9.8	CRITICAL Network	kubernetes	kubernetes	Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-1906	2024-11-21 11:47	2016-02-4	Show	GitHub Exploit DB Packet Storm

276909	7.7	HIGH Network	kubernetes	kubernetes	The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.	CWE-284 Improper Access Control	CVE-2016-1905	2024-11-21 11:47	2016-02-4	Show	GitHub Exploit DB Packet Storm

276910	8.8	HIGH Network	janrain	php-openid	examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_NAME element in the SERVER superglobal array, which might a…	CWE-284 Improper Access Control	CVE-2016-2049	2024-11-21 11:47	2016-02-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed