Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240931 7.8 危険 シスコシステムズ - Cisco PGW 2200 Softswitch の SIP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-1565 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
240932 7.8 危険 シスコシステムズ - Cisco PGW 2200 Softswitch の SIP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1563 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
240933 7.8 危険 シスコシステムズ - Cisco PGW 2200 Softswitch の SIP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1562 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
240934 7.8 危険 シスコシステムズ - Cisco PGW 2200 Softswitch の SIP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1561 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
240935 3.5 注意 Angry Donuts
Drupal
- Drupal の Chaos Tool Suite モジュールの auto-complete 機能における非公開ノードのタイトルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1548 2012-06-26 16:19 2010-05-19 Show GitHub Exploit DB Packet Storm
240936 6.8 警告 Angry Donuts
Drupal
- Drupal の Chaos Tool Suite モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-1547 2012-06-26 16:19 2010-05-19 Show GitHub Exploit DB Packet Storm
240937 6 警告 Angry Donuts
Drupal
- Drupal の Chaos Tool Suite モジュールの import 機能における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1546 2012-06-26 16:19 2010-05-19 Show GitHub Exploit DB Packet Storm
240938 5 警告 ACME Laboratories
rca
- RCA DCM425 ケーブルモデムの micro_httpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1544 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
240939 4.3 警告 etracker
Drupal
- Drupal の eTracker モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1543 2012-06-26 16:19 2010-03-3 Show GitHub Exploit DB Packet Storm
240940 6.8 警告 dragonfrugal - DFD Cart の admin/configure.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-1542 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267961 9.8 CRITICAL
Network
s9y serendipity include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion and a possible Code Execution attack during a first-time installation because it fails to sanitize the… CWE-284
Improper Access Control
CVE-2016-10082 2024-11-21 11:43 2016-12-30 Show GitHub Exploit DB Packet Storm
267962 7.8 HIGH
Local
shutter-project shutter /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action. CWE-19
 Data Processing Errors
CVE-2016-10081 2024-11-21 11:43 2016-12-30 Show GitHub Exploit DB Packet Storm
267963 7.5 HIGH
Local
wampserver wampserver WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary co… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10072 2024-11-21 11:43 2016-12-27 Show GitHub Exploit DB Packet Storm
267964 7.5 HIGH
Local
wampserver wampserver WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged l… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10031 2024-11-21 11:43 2016-12-27 Show GitHub Exploit DB Packet Storm
267965 6.1 MEDIUM
Network
antisamy_project antisamy In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impac… CWE-79
Cross-site Scripting
CVE-2016-10006 2024-11-21 11:43 2016-12-25 Show GitHub Exploit DB Packet Storm
267966 7.5 HIGH
Network
sprecher-automation sprecon-e_service_program An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10041 2024-11-21 11:43 2016-12-25 Show GitHub Exploit DB Packet Storm
267967 7.3 HIGH
Network
modx modx_revolution Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to … CWE-22
Path Traversal
CVE-2016-10039 2024-11-21 11:43 2016-12-24 Show GitHub Exploit DB Packet Storm
267968 7.3 HIGH
Network
modx modx_revolution Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to … CWE-22
Path Traversal
CVE-2016-10038 2024-11-21 11:43 2016-12-24 Show GitHub Exploit DB Packet Storm
267969 7.3 HIGH
Network
modx modx_revolution Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, re… CWE-22
Path Traversal
CVE-2016-10037 2024-11-21 11:43 2016-12-24 Show GitHub Exploit DB Packet Storm
267970 7.5 HIGH
Network
sap solution_manager Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524. CWE-200
Information Exposure
CVE-2016-10005 2024-11-21 11:43 2016-12-19 Show GitHub Exploit DB Packet Storm