Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241751	4.3	警告	The Dojo Foundation	-	Dojo Toolkit SDK の dijit/tests/_testCommon.js におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2275	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

241752	4.3	警告	The Dojo Foundation	-	Dojo におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2010-2274	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

241753	4.3	警告	The Dojo Foundation	-	Dojo におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2273	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

241754	10	危険	The Dojo Foundation	-	Dojo の iframe_history.html における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2010-2272	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

241755	7.5	危険	Accoria Networks	-	Accoria Web Server の authcfg.cgi におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2010-2271	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

241756	7.5	危険	Accoria Networks	-	Accoria Web Server におけるセッションをハイジャックされる脆弱性	CWE-310 暗号の問題	CVE-2010-2270	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

241757	5	警告	Accoria Networks	-	Accoria Web Server の loadstatic.cgi におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2269	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

241758	6.8	警告	Accoria Networks	-	Accoria Web Server の authcfg.cgi におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-2268	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

241759	4.3	警告	Accoria Networks	-	Accoria Web Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2267	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

241760	4.3	警告	アップルマイクロソフト	-	Apple Safari の CSS 実装における訪問した Web ページに関する重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2264	2012-06-26 16:19	2010-06-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266611	7.5	HIGH Network	fonality	hud_web fonality	The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote …	CWE-310 NVD-CWE-Other Cryptographic Issues	CVE-2016-2364	2024-11-21 11:48	2016-06-20	Show	GitHub Exploit DB Packet Storm

266612	7.8	HIGH Local	fonality	fonality	Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2363	2024-11-21 11:48	2016-06-20	Show	GitHub Exploit DB Packet Storm

266613	9.8	CRITICAL Network	fonality	fonality	Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 has a hardcoded password for the FTP account, which allows remote attackers to obtain access via a (1) FTP or (2) SSH connection.	NVD-CWE-Other	CVE-2016-2362	2024-11-21 11:48	2016-06-20	Show	GitHub Exploit DB Packet Storm

266614	6.0	MEDIUM Local	qemu canonical	qemu ubuntu_linux	The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU proces…	CWE-20 Improper Input Validation	CVE-2016-2841	2024-11-21 11:48	2016-06-17	Show	GitHub Exploit DB Packet Storm

266615	7.1	HIGH Local	qemu	qemu	Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain s…	CWE-189 Numeric Errors	CVE-2016-2538	2024-11-21 11:48	2016-06-17	Show	GitHub Exploit DB Packet Storm

266616	6.5	MEDIUM Local	qemu canonical	qemu ubuntu_linux	The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administr…	NVD-CWE-Other	CVE-2016-2392	2024-11-21 11:48	2016-06-17	Show	GitHub Exploit DB Packet Storm

266617	5.0	MEDIUM Local	qemu canonical debian	qemu ubuntu_linux debian_linux	The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process …	CWE-476 NULL Pointer Dereference	CVE-2016-2391	2024-11-21 11:48	2016-06-17	Show	GitHub Exploit DB Packet Storm

266618	8.8	HIGH Network	canonical opensuse mozilla novell	ubuntu_linux leap opensuse network_security_services firefox suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit	Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…	NVD-CWE-noinfo	CVE-2016-2834	2024-11-21 11:48	2016-06-13	Show	GitHub Exploit DB Packet Storm

266619	6.1	MEDIUM Network	opensuse mozilla canonical	leap opensuse firefox ubuntu_linux	Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks vi…	CWE-79 CWE-254 Cross-site Scripting 7PK - Security Features	CVE-2016-2833	2024-11-21 11:48	2016-06-13	Show	GitHub Exploit DB Packet Storm

266620	4.3	MEDIUM Network	canonical mozilla opensuse	ubuntu_linux firefox leap opensuse	Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets (CSS) pseudo-classes.	CWE-200 Information Exposure	CVE-2016-2832	2024-11-21 11:48	2016-06-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed