Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240911	7.5	危険	geekhelps	-	Geekhelps ADMP の bannershow.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0968	2012-06-26 16:19	2010-03-16	Show	GitHub Exploit DB Packet Storm

240912	5.1	警告	geekhelps	-	Geekhelps ADMP におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0967	2012-06-26 16:19	2010-03-16	Show	GitHub Exploit DB Packet Storm

240913	6.8	警告	deV!L'z Clanportal	-	DZCP の inc/config.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0966	2012-06-26 16:19	2010-03-16	Show	GitHub Exploit DB Packet Storm

240914	5	警告	アップル	-	Apple AirPort Express などの FTP プロキシサーバにおけるイントラネット FTP サーバから TCP 転送をされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0962	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

240915	7.5	危険	dev4u	-	dev4u CMS の go_target.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0951	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

240916	6.8	警告	bfs.kilu	-	Bigforum の profil.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0948	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

240917	4.3	警告	bbsmax	-	Max Network Technology BBSMAX の post.aspx におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0947	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

240918	4.3	警告	D-Link Systems, Inc.	-	D-LINK DKVM-IP8 の auth.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0936	2012-06-26 16:19	2010-03-8	Show	GitHub Exploit DB Packet Storm

240919	5	警告	アップルマイクロソフト	-	Apple Safari で使用されている CFNetwork の cfnetwork.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0925	2012-06-26 16:19	2010-03-3	Show	GitHub Exploit DB Packet Storm

240920	5	警告	アップルマイクロソフト	-	Apple Safari で使用されている CFNetwork の cfnetwork.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0924	2012-06-26 16:19	2010-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267401	7.3	HIGH Network	modx	modx_revolution	Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to …	CWE-22 Path Traversal	CVE-2016-10038	2024-11-21 11:43	2016-12-24	Show	GitHub Exploit DB Packet Storm

267402	7.3	HIGH Network	modx	modx_revolution	Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, re…	CWE-22 Path Traversal	CVE-2016-10037	2024-11-21 11:43	2016-12-24	Show	GitHub Exploit DB Packet Storm

267403	7.5	HIGH Network	sap	solution_manager	Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524.	CWE-200 Information Exposure	CVE-2016-10005	2024-11-21 11:43	2016-12-19	Show	GitHub Exploit DB Packet Storm

267404	7.5	HIGH Network	ruckus	wireless_h500	Ruckus Wireless H500 web management interface denial of service	NVD-CWE-noinfo	CVE-2016-1000215	2024-11-21 11:43	2016-10-25	Show	GitHub Exploit DB Packet Storm

267405	5.3	MEDIUM Network	ruckus	wireless_h500	Ruckus Wireless H500 web management interface authentication bypass	CWE-287 CWE-200 Improper Authentication Information Exposure	CVE-2016-1000214	2024-11-21 11:43	2016-10-25	Show	GitHub Exploit DB Packet Storm

267406	8.8	HIGH Network	ruckus	wireless_h500	Ruckus Wireless H500 web management interface authenticated command injection	CWE-78 OS Command	CVE-2016-1000216	2024-11-21 11:43	2016-10-11	Show	GitHub Exploit DB Packet Storm

267407	9.8	CRITICAL Network	zotpress_project	zotpress	Zotpress plugin for WordPress SQLi in zp_get_account()	CWE-89 SQL Injection	CVE-2016-1000217	2024-11-21 11:43	2016-10-6	Show	GitHub Exploit DB Packet Storm

267408	7.5	HIGH Network	mb.miniaudioplayer_project	mb.miniaudioplayer	WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, including open proxy and security bypass vulnerabilities because it fails to properl…	CWE-610 Externally Controlled Reference to a Resource in Another Sphere	CVE-2016-0796	2024-11-21 11:42	2022-07-29	Show	GitHub Exploit DB Packet Storm

267409	5.3	MEDIUM Network	twistedmatrix	twisted	Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PR…	CWE-425 Direct Request ('Forced Browsing')	CVE-2016-1000111	2024-11-21 11:42	2020-03-12	Show	GitHub Exploit DB Packet Storm

267410	5.3	MEDIUM Network	facebook	hhvm	HHVM does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment v…	CWE-665 Improper Initialization	CVE-2016-1000109	2024-11-21 11:42	2020-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed