Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204801 6.5 警告
Network
Marcel Hellkamp - bottle の bottle.py の redirect() における CRLF 攻撃を引き起こされる脆弱性 CWE-93
CRLF インジェクション
CVE-2016-9964 2016-12-26 16:40 2016-12-10 Show GitHub Exploit DB Packet Storm
204802 7.8 重要
Local
Nagios Enterprises, LLC - Nagios Core の base/logging.c における root 権限を取得される脆弱性 CWE-264
CWE-59
CVE-2016-9566 2016-12-26 14:32 2016-12-7 Show GitHub Exploit DB Packet Storm
204803 9.8 緊急
Network
Nagios Enterprises, LLC - Nagios Core のフロントエンドコンポーネントで使用される MagpieRSS における任意のファイルを読まれる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-9565 2016-12-26 14:32 2016-10-24 Show GitHub Exploit DB Packet Storm
204804 5.3 警告
Network
Apache Software Foundation - Apache Tika の Apache Tika サーバにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2015-3271 2016-12-26 14:05 2015-08-14 Show GitHub Exploit DB Packet Storm
204805 9.8 緊急
Network
アドビシステムズ - Adobe DNG Converter におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-7856 2016-12-26 12:16 2016-12-13 Show GitHub Exploit DB Packet Storm
204806 7.5 重要
Network
アドビシステムズ - Adobe ColdFusion Builder における情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2016-7887 2016-12-26 11:43 2016-12-13 Show GitHub Exploit DB Packet Storm
204807 6.1 警告
Network
アドビシステムズ - Adobe Experience Manager Forms および LiveCycle の PMAdmin モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6934 2016-12-26 11:23 2016-12-13 Show GitHub Exploit DB Packet Storm
204808 9.8 緊急
Network
X.Org Foundation
Fedora Project
- X.org libXvMC におけるバッファアンダーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-7953 2016-12-22 18:28 2016-10-4 Show GitHub Exploit DB Packet Storm
204809 7.5 重要
Network
X.Org Foundation
Fedora Project
- X.org libXtst におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-284
CVE-2016-7952 2016-12-22 18:28 2016-10-4 Show GitHub Exploit DB Packet Storm
204810 9.8 緊急
Network
X.Org Foundation
Fedora Project
- X.org libXtst における整数オーバーフローの脆弱性 CWE-125
CWE-190
CVE-2016-7951 2016-12-22 18:28 2016-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 2, 2026, 4:03 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350191 - yoflash com_mochigames SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to… CWE-89
SQL Injection
CVE-2010-0459 2017-08-17 10:32 2010-01-29 Show GitHub Exploit DB Packet Storm
350192 - joomla com_casino SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) category or (2) player action … CWE-89
SQL Injection
CVE-2010-0461 2017-08-17 10:32 2010-01-29 Show GitHub Exploit DB Packet Storm
350193 - joomla com_casino Exploit PoC reference links indicate a prerequisite of privileged authenticated user. CWE-89
SQL Injection
CVE-2010-0461 2017-08-17 10:32 2010-01-29 Show GitHub Exploit DB Packet Storm
350194 - horde imp Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the netwo… CWE-200
Information Exposure
CVE-2010-0463 2017-08-17 10:32 2010-01-30 Show GitHub Exploit DB Packet Storm
350195 - files2links f2l_3000_appliance SQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions and models, allows remote attackers to execute arbitrary SQL commands via unspecified parameters to th… CWE-89
SQL Injection
CVE-2010-0469 2017-08-17 10:32 2010-02-3 Show GitHub Exploit DB Packet Storm
350196 - palo_alto_networks firewall Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2010-0475 2017-08-17 10:32 2010-05-15 Show GitHub Exploit DB Packet Storm
350197 - freebit serversman FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service (daemon crash) via a HEAD request for the / URI. CWE-20
 Improper Input Validation 
CVE-2010-0496 2017-08-17 10:32 2010-02-4 Show GitHub Exploit DB Packet Storm
350198 - sun opensolaris The default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have an unspecified impact via vectors related to using smbadm to join a Windows Active Directory domain. CWE-16
Configuration
CVE-2010-0558 2017-08-17 10:32 2010-02-6 Show GitHub Exploit DB Packet Storm
350199 - intel intel_desktop_board Unspecified vulnerability in the BIOS in Intel Desktop Board DB, DG, DH, DP, and DQ Series allows local administrators to execute arbitrary code in System Management Mode (SSM) via unknown attack vec… NVD-CWE-noinfo
CVE-2010-0560 2017-08-17 10:32 2010-02-9 Show GitHub Exploit DB Packet Storm
350200 - trendmicro officescan Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service (c… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-0564 2017-08-17 10:32 2010-02-10 Show GitHub Exploit DB Packet Storm