Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206311 5.5 警告 マカフィー - 32-bit Windows プラットフォーム上で稼動する McAfee Application Control の swin.sys カーネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2016-1715 2016-01-26 10:48 2016-01-8 Show GitHub Exploit DB Packet Storm
206312 5 警告 The Prosody Team
Debian
- Prosody の mod_dialback モジュールにおけるサーバになりすまされる脆弱性 CWE-Other
その他
CVE-2016-1232 2016-01-26 10:48 2016-01-8 Show GitHub Exploit DB Packet Storm
206313 4.3 警告 The Prosody Team
Debian
- Prosody の HTTP file-serving モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1231 2016-01-26 10:48 2016-01-8 Show GitHub Exploit DB Packet Storm
206314 5.8 警告 OpenStack
Fedora Project
- Swift3 における反射攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2015-8466 2016-01-26 10:48 2015-12-10 Show GitHub Exploit DB Packet Storm
206315 5 警告 オラクル - Oracle GoldenGate の Oracle GoldenGate コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2016-0450 2016-01-26 10:46 2016-01-19 Show GitHub Exploit DB Packet Storm
206316 5 警告 オラクル - Oracle Enterprise Manager Grid Control の Oracle Application Testing Suite における Test Manager for Web Apps に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0484 2016-01-26 09:49 2016-01-19 Show GitHub Exploit DB Packet Storm
206317 5.2 警告 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Base Platform における Agent Next Gen に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0455 2016-01-26 09:49 2016-01-19 Show GitHub Exploit DB Packet Storm
206318 4.6 警告 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Base Platform における Agent Next Gen に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0449 2016-01-26 09:49 2016-01-19 Show GitHub Exploit DB Packet Storm
206319 4.6 警告 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Base Platform における Agent Next Gen に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0447 2016-01-26 09:49 2016-01-19 Show GitHub Exploit DB Packet Storm
206320 2.1 注意 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Base Platform における Agent Next Gen に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0446 2016-01-26 09:49 2016-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350411 - abcbackup
internet-soft
abc_backup
urgent_backup
Stack-based buffer overflow in (1) Urgent Backup 3.20, and (2) ABC Backup Pro 5.20 and ABC Backup 5.50, allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP archive. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-1686 2010-05-12 09:41 2010-05-5 Show GitHub Exploit DB Packet Storm
350412 - turnkeyforms yahoo-answers-clone Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject arbitrary web script or HTML via the questionid parameter. CWE-79
Cross-site Scripting
CVE-2009-4858 2010-05-11 21:02 2010-05-11 Show GitHub Exploit DB Packet Storm
350413 - onlinetechtools.com owos_lite Multiple cross-site scripting (XSS) vulnerabilities in Online Work Order Suite (OWOS) Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) def… CWE-79
Cross-site Scripting
CVE-2009-4859 2010-05-11 21:02 2010-05-11 Show GitHub Exploit DB Packet Storm
350414 - supportpro supportdesk Cross-site scripting (XSS) vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. CWE-79
Cross-site Scripting
CVE-2009-4861 2010-05-11 21:02 2010-05-11 Show GitHub Exploit DB Packet Storm
350415 - hitronsoft answer_me Cross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the q_id parameter to the answers script (aka answers.php). N… CWE-79
Cross-site Scripting
CVE-2009-4868 2010-05-11 21:02 2010-05-11 Show GitHub Exploit DB Packet Storm
350416 - hitronsoft nasim_guest_book Cross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter. CWE-79
Cross-site Scripting
CVE-2009-4869 2010-05-11 21:02 2010-05-11 Show GitHub Exploit DB Packet Storm
350417 - openttd openttd OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or … CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0401 2010-05-11 13:00 2010-05-5 Show GitHub Exploit DB Packet Storm
350418 - openttd openttd OpenTTD before 1.0.1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and daemon crash) by performing incomplete downloads of the map. CWE-399
 Resource Management Errors
CVE-2010-0406 2010-05-11 13:00 2010-05-5 Show GitHub Exploit DB Packet Storm
350419 - adobe photoshop_cs4 Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user-assisted remote attackers to execute arbitrary code via a crafted TIFF file. CWE-94
Code Injection
CVE-2010-1279 2010-05-11 13:00 2010-05-5 Show GitHub Exploit DB Packet Storm
350420 - mytty webapplication_finger_printer Web Application Finger Printer (WAFP) 0.01-26c3 uses fixed pathnames under /tmp for temporary files and directories, which (1) allows local users to cause a denial of service (application outage) by … NVD-CWE-Other
CVE-2010-1438 2010-05-11 13:00 2010-05-6 Show GitHub Exploit DB Packet Storm