Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197001 6.1 警告
Network
html5lib - html5lib のシリアライザにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9909 2017-03-9 17:34 2016-07-14 Show GitHub Exploit DB Packet Storm
197002 8.8 重要
Network
IBM - IBM Tivoli Storage Manager for Virtual Environments におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-6033 2017-03-9 17:14 2016-12-14 Show GitHub Exploit DB Packet Storm
197003 9.8 緊急
Network
IBM - IBM Websphere MQ JMS クライアントにおける任意の Java コードを実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2016-0360 2017-03-9 17:14 2017-01-6 Show GitHub Exploit DB Packet Storm
197004 6.1 警告
Network
IBM - IBM Resilient におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6062 2017-03-9 16:56 2016-11-10 Show GitHub Exploit DB Packet Storm
197005 7.5 重要
Network
IBM - IBM Security Access Manager における重要な情報を解読される脆弱性 CWE-326
不適切な暗号強度
CVE-2016-5919 2017-03-9 16:56 2016-06-29 Show GitHub Exploit DB Packet Storm
197006 7.8 重要
Local
Debian
GraphicsMagick
- GraphicsMagick の MagickCore/memory.c の AcquireMagickMemory 関数における脆弱性 CWE-119
バッファエラー
CVE-2016-8862 2017-03-9 16:51 2016-09-14 Show GitHub Exploit DB Packet Storm
197007 5.5 警告
Local
ImageMagick - ImageMagick の MagickCore/pixel-accessor.h の IsPixelMonochrome 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-8678 2017-03-9 16:51 2016-09-14 Show GitHub Exploit DB Packet Storm
197008 7.8 重要
Local
openSUSE project
Debian
ImageMagick
- ImageMagick の MagickCore/quantum.c の AcquireQuantumPixels 関数における脆弱性 CWE-119
バッファエラー
CVE-2016-8677 2017-03-9 16:51 2016-09-16 Show GitHub Exploit DB Packet Storm
197009 9.8 緊急
Network
Aerospike, Inc. - Aerospike Database Server の RW ファブリックメッセージのパーティクルタイプにおける境界外インデックスに関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2016-9053 2017-03-9 16:49 2016-10-26 Show GitHub Exploit DB Packet Storm
197010 9.8 緊急
Network
Aerospike, Inc. - Aerospike Database Server のバッチ処理フィールドの構文解析機能における境界外書き込みの脆弱性 CWE-787
境界外書き込み
CVE-2016-9051 2017-03-9 16:49 2016-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348961 - cisco pgw_2200_softswitch Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via unknown SIP… NVD-CWE-noinfo
CVE-2010-0604 2010-05-21 14:57 2010-05-15 Show GitHub Exploit DB Packet Storm
348962 - gohigheris com_jwhmcs Directory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to … CWE-22
Path Traversal
CVE-2010-1977 2010-05-21 13:00 2010-05-20 Show GitHub Exploit DB Packet Storm
348963 - openmairie opencatalogue Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via dire… CWE-22
Path Traversal
CVE-2010-1999 2010-05-21 13:00 2010-05-21 Show GitHub Exploit DB Packet Storm
348964 - ron_jerome bibliography Cross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privil… CWE-79
Cross-site Scripting
CVE-2010-2000 2010-05-21 13:00 2010-05-21 Show GitHub Exploit DB Packet Storm
348965 - ninjitsuweb civiregister Cross-site scripting (XSS) vulnerability in the CiviRegister module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI. CWE-79
Cross-site Scripting
CVE-2010-2001 2010-05-21 13:00 2010-05-21 Show GitHub Exploit DB Packet Storm
348966 - addison_berry
jeff_warrington
wordfilter Cross-site scripting (XSS) vulnerability in the Wordfilter module 5.x before 5.x-1.1 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with "administer words filtered" privileges, … CWE-79
Cross-site Scripting
CVE-2010-2002 2010-05-21 13:00 2010-05-21 Show GitHub Exploit DB Packet Storm
348967 - toutvirtual virtualiq Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the (1) addNewDept, (2) deptId, or (3… CWE-79
Cross-site Scripting
CVE-2009-4842 2010-05-21 13:00 2010-05-8 Show GitHub Exploit DB Packet Storm
348968 - sixapart movable_type Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six Apart Movable Type 5.0 and 5.01 allow remote attackers to inject arbitrary web script or HTML via unkno… CWE-79
Cross-site Scripting
CVE-2010-1985 2010-05-21 04:47 2010-05-20 Show GitHub Exploit DB Packet Storm
348969 - mediawiki mediawiki MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by add… CWE-20
 Improper Input Validation 
CVE-2010-1189 2010-05-20 14:49 2010-04-1 Show GitHub Exploit DB Packet Storm
348970 - cisco pgw_2200_softswitch The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via a malformed session attribute, aka Bug I… CWE-20
 Improper Input Validation 
CVE-2010-0603 2010-05-20 14:48 2010-05-15 Show GitHub Exploit DB Packet Storm