Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201701 6.1 警告
Network 		Google
openSUSE project		 - Google Chrome で使用される Blink の WebKit/Source/platform/v8_inspector/V8Debugger.cpp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5164 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201702 4.3 警告
Network 		Google
openSUSE project		 - Google Chrome の双方向テキストの実装におけるアドレスバーを偽装される脆弱性 CWE-Other
その他 		CVE-2016-5163 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201703 6.5 警告
Network 		Google
openSUSE project		 - Google Chrome の extensions/browser/url_request_util.cc におけるクリックジャッキング攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2016-5162 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201704 8.8 重要
Network 		Google
openSUSE project		 - Google Chrome で使用される Blink におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-5161 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201705 6.5 警告
Network 		Google
openSUSE project		 - Google Chrome の extensions/browser/url_request_util.cc におけるクリックジャッキング攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2016-5160 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201706 8.8 重要
Network 		Google
openSUSE project		 - Google Chrome の PDFium で使用される OpenJPEG における整数オーバーフローの脆弱性 CWE-Other
その他 		CVE-2016-5159 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201707 8.8 重要
Network 		Google
openSUSE project		 - Google Chrome の PDFium で使用される OpenJPEG の tcd.c の opj_tcd_init_tile 関数における整数オーバーフローの脆弱性 CWE-Other
その他 		CVE-2016-5158 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201708 8.4 重要
Local 		Google
Linux		 - Linux Kernel 用の特定の QuIC Android パッチの drivers/staging/android/ashmem.c におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-5340 2016-11-17 18:07 2016-07-28 Show GitHub Exploit DB Packet Storm
201709 7.8 重要
Local 		Google
Linux		 - MSM デバイスなどの製品用 QuIC Android コントリビューションで使用される Linux Kernel の wcnss_wlan デバイスドライバにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-5342 2016-11-17 18:07 2016-08-29 Show GitHub Exploit DB Packet Storm
201710 9.8 緊急
Network 		Google
Linux		 - MSM デバイスなどの製品用 QuIC Android コントリビューションで使用される Linux Kernel の MDSS ドライバにおける整数オーバーフローの脆弱性 CWE-Other
その他 		CVE-2016-5344 2016-11-17 18:07 2016-08-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345261 - ilya_ivanchenko itweak_upload Cross-site scripting (XSS) vulnerability in the iTweak Upload module 6.x-1.x before 6.x-1.2 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users, with create content and upload fil… CWE-79
Cross-site Scripting 		CVE-2010-0697 2017-08-17 10:32 2010-02-24 Show GitHub Exploit DB Packet Storm
345262 - dynamicsoft wsc_cms SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are o… CWE-89
SQL Injection 		CVE-2010-0698 2017-08-17 10:32 2010-02-24 Show GitHub Exploit DB Packet Storm
345263 - wampserver wampserver Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via the lang parameter. CWE-79
Cross-site Scripting 		CVE-2010-0700 2017-08-17 10:32 2010-02-24 Show GitHub Exploit DB Packet Storm
345264 - newgensoft omnidocs SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2010-0701 2017-08-17 10:32 2010-02-24 Show GitHub Exploit DB Packet Storm
345265 - subexworld nikira_fraud_management_system Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter. CWE-79
Cross-site Scripting 		CVE-2010-0706 2017-08-17 10:32 2010-02-26 Show GitHub Exploit DB Packet Storm
345266 - timeclock-software employee_timeclock_software Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create n… CWE-352
 Origin Validation Error 		CVE-2010-0707 2017-08-17 10:32 2010-02-26 Show GitHub Exploit DB Packet Storm
345267 - sun java_system_directory_server Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enter… NVD-CWE-noinfo
CVE-2010-0708 2017-08-17 10:32 2010-02-26 Show GitHub Exploit DB Packet Storm
345268 - limny limny Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to (1) hijack the authentication of users or administrators for requests that change the email address o… CWE-352
 Origin Validation Error 		CVE-2010-0709 2017-08-17 10:32 2010-02-26 Show GitHub Exploit DB Packet Storm
345269 - zenoss zenoss Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and other versions before 2.5, allow remote authenticated users to execute arbitrary SQL commands via the… CWE-89
SQL Injection 		CVE-2010-0712 2017-08-17 10:32 2010-02-27 Show GitHub Exploit DB Packet Storm
345270 - moinmo moinmoin The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors. CWE-16
Configuration 		CVE-2010-0717 2017-08-17 10:32 2010-02-27 Show GitHub Exploit DB Packet Storm