Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241601 7.5 危険 files2links - Files2Links F2L 3000 機器における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0469 2012-06-26 16:19 2010-02-2 Show GitHub Exploit DB Packet Storm
241602 5 警告 Chill Creations
Joomla!
- Joomla! の ccNewsletter コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0467 2012-06-26 16:19 2010-02-2 Show GitHub Exploit DB Packet Storm
241603 7.5 危険 a3malnet - magic-portal の home.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0457 2012-06-26 16:19 2010-01-28 Show GitHub Exploit DB Packet Storm
241604 7.5 危険 fabricadigital - Publique! の cgi/cgilua.exe/sys/start.htm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0454 2012-06-26 16:19 2010-01-28 Show GitHub Exploit DB Packet Storm
241605 5 警告 Digium - Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0441 2012-06-26 16:19 2010-02-4 Show GitHub Exploit DB Packet Storm
241606 6.9 警告 chip salzenberg - Chip Salzenberg Deliver における重要な情報を取得される脆弱性 CWE-59
リンク解釈の問題
CVE-2010-0439 2012-06-26 16:19 2010-03-26 Show GitHub Exploit DB Packet Storm
241607 4.3 警告 entente-oya
Apache Software Foundation
neogia
- Opentaps などで使用される Apache Open For Business Project におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0432 2012-06-26 16:19 2010-04-15 Show GitHub Exploit DB Packet Storm
241608 3.3 注意 paul vixie
fedorahosted.org
- cronie および Vixie cron の edit_cmd 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-59
リンク解釈の問題
CVE-2010-0424 2012-06-26 16:19 2010-02-25 Show GitHub Exploit DB Packet Storm
241609 4 警告 GNOME Project - gnome-screensaver における画面がロックされている無人のワークステーションにアクセスされる脆弱性 CWE-Other
その他
CVE-2010-0422 2012-06-26 16:19 2010-02-12 Show GitHub Exploit DB Packet Storm
241610 10 危険 chumby - chumby classic の chumby one の Web インターフェースにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-0418 2012-06-26 16:19 2010-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266721 5.5 MEDIUM
Local
apple ibooks_author Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, relat… NVD-CWE-Other
CVE-2016-1789 2024-11-21 11:47 2016-04-6 Show GitHub Exploit DB Packet Storm
266722 6.2 MEDIUM
Local
apple iphone_os The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app. CWE-284
Improper Access Control
CVE-2016-1760 2024-11-21 11:47 2016-03-30 Show GitHub Exploit DB Packet Storm
266723 5.9 MEDIUM
Network
apple watchos
iphone_os
mac_os_x
Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachmen… CWE-310
Cryptographic Issues
CVE-2016-1788 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
266724 5.3 MEDIUM
Network
apple mac_os_x_server Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors. CWE-200
Information Exposure
CVE-2016-1787 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
266725 5.4 MEDIUM
Network
apple iphone_os
safari
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx (aka redirection) status code, which allows remote attackers to spoof the … CWE-200
Information Exposure
CVE-2016-1786 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
266726 6.5 MEDIUM
Network
apple iphone_os
safari
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Or… CWE-200
Information Exposure
CVE-2016-1785 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
266727 6.5 MEDIUM
Network
apple iphone_os
tvos
safari
The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service (resource consumption and application crash) … CWE-400
 Uncontrolled Resource Consumption
CVE-2016-1784 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
266728 8.8 HIGH
Network
apple
webkitgtk
iphone_os
tvos
safari
webkitgtk\+
WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1783 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
266729 6.5 MEDIUM
Network
apple iphone_os
safari
WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a craf… CWE-284
Improper Access Control
CVE-2016-1782 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
266730 4.3 MEDIUM
Network
apple iphone_os
safari
WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors. CWE-19
 Data Processing Errors
CVE-2016-1781 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm