Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241471	3.7	注意	GNU Project	-	GNU nano におけるファイルの所有者を変更される脆弱性	CWE-362 競合状態	CVE-2010-1161	2012-06-26 16:19	2010-04-15	Show	GitHub Exploit DB Packet Storm

241472	1.9	注意	GNU Project	-	GNU nano における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-1160	2012-06-26 16:19	2010-04-7	Show	GitHub Exploit DB Packet Storm

241473	6.8	警告	Apache Software Foundation	-	Apache HTTP Server の mod_auth_shadow モジュールにおけるデータを変更される脆弱性	CWE-362 競合状態	CVE-2010-1151	2012-06-26 16:19	2010-04-20	Show	GitHub Exploit DB Packet Storm

241474	2.1	注意	freedesktop.org	-	udisks の probers/udisks-dm-export.c における暗号鍵を発見される脆弱性	CWE-200 情報漏えい	CVE-2010-1149	2012-06-26 16:19	2010-04-6	Show	GitHub Exploit DB Packet Storm

241475	9.3	危険	georg greve	-	SpamAssassin Milter プラグインにおける任意のシステムコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-1132	2012-06-26 16:19	2010-03-27	Show	GitHub Exploit DB Packet Storm

241476	4.3	警告	アップルマイクロソフト	-	Apple Safari で使用される JavaScriptCore.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1131	2012-06-26 16:19	2010-03-27	Show	GitHub Exploit DB Packet Storm

241477	5.8	警告	アップル	-	WebKit の JavaScript 実装におけるキーストロークを form フィールドに送信される脆弱性	CWE-200 情報漏えい	CVE-2010-1126	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

241478	2.1	注意	chip salzenberg	-	Chip Salzenberg Deliver におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-1123	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

241479	5	警告	ASP indir	-	LookMer Music Portal におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1116	2012-06-26 16:19	2010-03-25	Show	GitHub Exploit DB Packet Storm

241480	5	警告	comscripts	-	Web Server Creator - Web Portal の news/include/customize.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1115	2012-06-26 16:19	2010-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266711	5.3	MEDIUM Network	openstack	nova	The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users …	CWE-200 Information Exposure	CVE-2016-2140	2024-11-21 11:47	2016-04-12	Show	GitHub Exploit DB Packet Storm

266712	8.1	HIGH Network	saltstack opensuse	salt leap	Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master dat…	CWE-284 Improper Access Control	CVE-2016-1866	2024-11-21 11:47	2016-04-12	Show	GitHub Exploit DB Packet Storm

266713	6.2	MEDIUM Local	freebsd	freebsd	Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1885	2024-11-21 11:47	2016-04-12	Show	GitHub Exploit DB Packet Storm

266714	7.5	HIGH Network	apache	jetspeed	The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add, (2) edit, or (3) delete users via the RES…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2171	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

266715	7.5	HIGH Network	apache	openmeetings	The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified pro…	CWE-200 Information Exposure	CVE-2016-2164	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

266716	6.1	MEDIUM Network	apache	openmeetings	Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event.	CWE-79 Cross-site Scripting	CVE-2016-2163	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

266717	7.3	HIGH Network	debian rubyonrails	debian_linux ruby_on_rails rails	Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of t…	CWE-20 Improper Input Validation	CVE-2016-2098	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

266718	5.3	MEDIUM Network	rubyonrails	ruby_on_rails rails	Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted u…	CWE-22 Path Traversal	CVE-2016-2097	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

266719	7.5	HIGH Network	nodejs fedoraproject	node.js fedora	Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.	CWE-20 Improper Input Validation	CVE-2016-2086	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

266720	9.8	CRITICAL Network	hp	asset_manager asset_manager_cloudsystem_chargeback	HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache C…	CWE-19 Data Processing Errors	CVE-2016-2000	2024-11-21 11:47	2016-04-6	Show	GitHub Exploit DB Packet Storm