Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241171 9.3 危険 BarCodeWiz, Inc. - BarCodeWiz BarCode ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2932 2012-06-26 16:19 2010-08-5 Show GitHub Exploit DB Packet Storm
241172 7.5 危険 ali kenan - AKY Blog の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2922 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
241173 6.8 警告 foobla
Joomla!		 - Joomla! の foobla_suggestions コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2920 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
241174 4.3 警告 aj square - AJ Square AJ Article の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2917 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
241175 7.5 危険 aj square - AJ Square AJ HYIP MERIDIAN の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2916 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
241176 7.5 危険 aj square - AJ Square AJ HYIP PRIME の welcome.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2915 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
241177 2.1 注意 アップル
citibank		 - Citibank Citi Mobile アプリケーションにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2913 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
241178 7.5 危険 alexred
Joomla!		 - Joomla! の oziogallery コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2910 2012-06-26 16:19 2010-07-28 Show GitHub Exploit DB Packet Storm
241179 7.5 危険 ScriptsFeed.com - ScriptsFeed Scripts Directory の articlesdetails.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2906 2012-06-26 16:19 2010-07-28 Show GitHub Exploit DB Packet Storm
241180 7.5 危険 ScriptsFeed.com - ScriptsFeed Scripts Directory の info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2905 2012-06-26 16:19 2010-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268501 5.5 MEDIUM
Local 		qt qxmlsimplereader Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10040 2024-11-21 11:43 2017-03-8 Show GitHub Exploit DB Packet Storm
268502 7.8 HIGH
Local 		freetype
debian 		freetype
debian_linux 		The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buf… CWE-125
Out-of-bounds Read 		CVE-2016-10244 2024-11-21 11:43 2017-03-6 Show GitHub Exploit DB Packet Storm
268503 5.5 MEDIUM
Local 		imagemagick
opensuse 		imagemagick
leap 		Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via… CWE-125
Out-of-bounds Read 		CVE-2016-10070 2024-11-21 11:43 2017-03-4 Show GitHub Exploit DB Packet Storm
268504 5.5 MEDIUM
Local 		imagemagick imagemagick Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a crafted file. CWE-120
Classic Buffer Overflow 		CVE-2016-10066 2024-11-21 11:43 2017-03-4 Show GitHub Exploit DB Packet Storm
268505 7.8 HIGH
Local 		imagemagick
opensuse 		imagemagick
leap 		The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. CWE-284
Improper Access Control 		CVE-2016-10065 2024-11-21 11:43 2017-03-4 Show GitHub Exploit DB Packet Storm
268506 6.5 MEDIUM
Network 		imagemagick imagemagick The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (crash) … CWE-252
 Unchecked Return Value 		CVE-2016-10061 2024-11-21 11:43 2017-03-4 Show GitHub Exploit DB Packet Storm
268507 8.8 HIGH
Network 		zoneminder zoneminder Cross-site request forgery (CSRF) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack the authentication of users for requests that change passwords and possibly have unspe… CWE-352
 Origin Validation Error 		CVE-2016-10206 2024-11-21 11:43 2017-03-4 Show GitHub Exploit DB Packet Storm
268508 7.3 HIGH
Network 		zoneminder zoneminder Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie. CWE-384
 Session Fixation 		CVE-2016-10205 2024-11-21 11:43 2017-03-4 Show GitHub Exploit DB Packet Storm
268509 9.8 CRITICAL
Network 		zoneminder zoneminder SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php. CWE-89
SQL Injection 		CVE-2016-10204 2024-11-21 11:43 2017-03-4 Show GitHub Exploit DB Packet Storm
268510 6.1 MEDIUM
Network 		zoneminder zoneminder Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor. CWE-79
Cross-site Scripting 		CVE-2016-10203 2024-11-21 11:43 2017-03-4 Show GitHub Exploit DB Packet Storm