Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259801	4.3	警告	アップル	-	Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0544	2010-12-10 14:24	2010-06-10	Show	GitHub Exploit DB Packet Storm

259802	4.3	警告	アップル	-	Apple Safari の WebKit における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0051	2010-12-10 14:23	2010-03-15	Show	GitHub Exploit DB Packet Storm

259803	9.3	危険	アップル	-	Apple Safari における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1806	2010-12-10 14:22	2010-09-7	Show	GitHub Exploit DB Packet Storm

259804	9.3	危険	アップル	-	Apple Safari の WebKit におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1789	2010-12-10 14:22	2010-07-30	Show	GitHub Exploit DB Packet Storm

259805	1.2	注意	アップル	-	Apple Safari の「Safari をリセット」における保存されているウェブサイトパスワードを読まれる脆弱性	CWE-362 競合状態	CVE-2009-1707	2010-12-10 14:21	2009-06-8	Show	GitHub Exploit DB Packet Storm

259806	4	警告	アップル	-	Apple Mac OS X の Dovecot における電子メールを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-4011	2010-12-9 14:50	2010-11-17	Show	GitHub Exploit DB Packet Storm

259807	7.8	危険	富士通	-	Interstage Application Server における情報漏えいの脆弱性	CWE-200 情報漏えい	-	2010-12-9 14:43	2010-11-15	Show	GitHub Exploit DB Packet Storm

259808	6.8	警告	アップル	-	Apple Mac OS X の Apple Type Services における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2010-4010	2010-12-9 14:37	2010-11-16	Show	GitHub Exploit DB Packet Storm

259809	5	警告	IBM	-	IBM WebSphere Application Server の Web Services Security コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0786	2010-12-9 14:34	2010-11-9	Show	GitHub Exploit DB Packet Storm

259810	4.3	警告	IBM	-	IBM WebSphere Application Server の Integrated Solution コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4220	2010-12-9 14:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276231	7.8	HIGH Local	symantec	mail_security_for_microsoft_exchange norton_power_eraser protection_engine endpoint_protection message_gateway norton_360 norton_antivirus norton_internet_security norton_secu…	The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SE…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2211	2024-11-21 11:48	2016-07-1	Show	GitHub Exploit DB Packet Storm

276232	7.3	HIGH Local	symantec	mail_security_for_microsoft_exchange norton_power_eraser protection_engine endpoint_protection message_gateway norton_360 norton_antivirus norton_internet_security norton_secu…	Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2210	2024-11-21 11:48	2016-07-1	Show	GitHub Exploit DB Packet Storm

276233	7.3	HIGH Local	symantec	mail_security_for_microsoft_exchange norton_power_eraser protection_engine endpoint_protection message_gateway norton_360 norton_antivirus norton_internet_security norton_secu…	Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway;…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2209	2024-11-21 11:48	2016-07-1	Show	GitHub Exploit DB Packet Storm

276234	8.4	HIGH Local	symantec	mail_security_for_microsoft_exchange norton_power_eraser protection_engine endpoint_protection message_gateway norton_360 norton_antivirus norton_internet_security norton_secu…	The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SE…	CWE-20 Improper Input Validation	CVE-2016-2207	2024-11-21 11:48	2016-07-1	Show	GitHub Exploit DB Packet Storm

276235	7.5	HIGH Network	fonality	hud_web fonality	The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote …	CWE-310 NVD-CWE-Other Cryptographic Issues	CVE-2016-2364	2024-11-21 11:48	2016-06-20	Show	GitHub Exploit DB Packet Storm

276236	7.8	HIGH Local	fonality	fonality	Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2363	2024-11-21 11:48	2016-06-20	Show	GitHub Exploit DB Packet Storm

276237	9.8	CRITICAL Network	fonality	fonality	Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 has a hardcoded password for the FTP account, which allows remote attackers to obtain access via a (1) FTP or (2) SSH connection.	NVD-CWE-Other	CVE-2016-2362	2024-11-21 11:48	2016-06-20	Show	GitHub Exploit DB Packet Storm

276238	6.0	MEDIUM Local	qemu canonical	qemu ubuntu_linux	The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU proces…	CWE-20 Improper Input Validation	CVE-2016-2841	2024-11-21 11:48	2016-06-17	Show	GitHub Exploit DB Packet Storm

276239	7.1	HIGH Local	qemu	qemu	Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain s…	CWE-189 Numeric Errors	CVE-2016-2538	2024-11-21 11:48	2016-06-17	Show	GitHub Exploit DB Packet Storm

276240	6.5	MEDIUM Local	qemu canonical	qemu ubuntu_linux	The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administr…	NVD-CWE-Other	CVE-2016-2392	2024-11-21 11:48	2016-06-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed