Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240881 7.5 危険 componentslab
Joomla!
- Joomla! の SQL Reports コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0753 2012-06-26 16:19 2010-02-26 Show GitHub Exploit DB Packet Storm
240882 5 警告 Drupal
Earl Dunovant
- Drupal 用 Node Type モジュール の week_post_page 関数におけるノード一覧を読み取られる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0752 2012-06-26 16:19 2010-02-24 Show GitHub Exploit DB Packet Storm
240883 2.1 注意 freedesktop.org - PolicyKit の libpolkit における任意のファイルの存在を特定される脆弱性 CWE-200
情報漏えい
CVE-2010-0750 2012-06-26 16:19 2010-03-9 Show GitHub Exploit DB Packet Storm
240884 5 警告 Timo Sirainen - Dovecot におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0745 2012-06-26 16:19 2010-05-8 Show GitHub Exploit DB Packet Storm
240885 5.8 警告 alvaro - aMSN における MSN サーバになりすまされる脆弱性 CWE-287
不適切な認証
CVE-2010-0744 2012-06-26 16:19 2010-04-20 Show GitHub Exploit DB Packet Storm
240886 6.2 警告 GTK+
GNOME Project
- gnome-screensaver で使用される GTK+ の gdk/gdkwindow.c における無人のワークステーションにアクセスされる脆弱性 CWE-362
競合状態
CVE-2010-0732 2012-06-26 16:19 2010-01-29 Show GitHub Exploit DB Packet Storm
240887 6.8 警告 aspcodecms - ASPCode CMS の default.asp におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-0711 2012-06-26 16:19 2010-02-25 Show GitHub Exploit DB Packet Storm
240888 7.5 危険 aspcodecms - ASPCode CMS の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0710 2012-06-26 16:19 2010-02-25 Show GitHub Exploit DB Packet Storm
240889 7.2 危険 マイクロソフト
AVAST Software s.r.o.
- Windows 2000 および XP 上で稼動する avast! の Aavmker4.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0705 2012-06-26 16:19 2010-02-25 Show GitHub Exploit DB Packet Storm
240890 7.5 危険 Fonality - Fonality Trixbox の cisco/services/PhonecDirectory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0702 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267521 6.1 MEDIUM
Network
pivotal_software cloud_foundry_elastic_runtime Cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2016-0927 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
267522 6.1 MEDIUM
Network
pivotal_software cloud_foundry_elastic_runtime Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.32 and 1.7.x before 1.7.8 allows remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting
CVE-2016-0926 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
267523 7.5 HIGH
Network
dell bsafe The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm list transmitted to a server, which makes … CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-0923 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
267524 9.8 CRITICAL
Network
emc vipr_srm EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack. CWE-285
Improper Authorization
CVE-2016-0922 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
267525 9.8 CRITICAL
Network
pivotal_software operations_manager Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remot… CWE-310
Cryptographic Issues
CVE-2016-0897 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
267526 7.3 HIGH
Network
pivotal_software cloud_foundry_elastic_runtime Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open Application Security Group, which might allow remote attackers to bypass intend… CWE-254
 7PK - Security Features
CVE-2016-0896 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
267527 9.8 CRITICAL
Network
pivotal_software operations_manager Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass ses… CWE-287
Improper Authentication
CVE-2016-0883 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
267528 6.5 MEDIUM
Network
python python The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypa… CWE-693
 Protection Mechanism Failure
CVE-2016-0772 2024-11-21 11:42 2016-09-2 Show GitHub Exploit DB Packet Storm
267529 8.1 HIGH
Network
emc authentication_manager_prime The Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service (PIN change for an a… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-0915 2024-11-21 11:42 2016-08-22 Show GitHub Exploit DB Packet Storm
267530 8.8 HIGH
Network
apache sentry Multiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote authenticated users to execute arbitrary code via the (1) reflect, (2) reflect2, or (3) java_method Hive built… CWE-284
Improper Access Control
CVE-2016-0760 2024-11-21 11:42 2016-08-20 Show GitHub Exploit DB Packet Storm