Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241991 6.5 警告 dameng - Dameng DM Database Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2159 2012-06-26 16:19 2010-06-7 Show GitHub Exploit DB Packet Storm
241992 4.3 警告 CMScout - CMScout の Search Site におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2154 2012-06-26 16:19 2010-06-3 Show GitHub Exploit DB Packet Storm
241993 7.5 危険 graviton-mediatech - Visitor Logger の banned.php における PHP リモートファイルインクルーションの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2146 2012-06-26 16:19 2010-06-3 Show GitHub Exploit DB Packet Storm
241994 6.8 警告 giaard - ProMan におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2138 2012-06-26 16:19 2010-06-2 Show GitHub Exploit DB Packet Storm
241995 7.5 危険 giaard - ProMan の _center.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2137 2012-06-26 16:19 2010-06-2 Show GitHub Exploit DB Packet Storm
241996 6.8 警告 articlefriendly - Article Friendly の admin/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2136 2012-06-26 16:19 2010-06-2 Show GitHub Exploit DB Packet Storm
241997 7.5 危険 danny ho - OES における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2132 2012-06-26 16:19 2010-06-2 Show GitHub Exploit DB Packet Storm
241998 4.3 警告 arisglobal - Aris Global ARISg の wflogin.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2130 2012-06-26 16:19 2010-06-2 Show GitHub Exploit DB Packet Storm
241999 7.5 危険 bartels-schoene - Bartels Schone ConPresso の firma.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2124 2012-06-26 16:19 2010-06-1 Show GitHub Exploit DB Packet Storm
242000 2.6 注意 brekeke - Brekeke PBX の pbx/gate におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2114 2012-06-26 16:19 2010-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266621 5.3 MEDIUM
Network 		microsoft internet_explorer
edge 		The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remote attackers to obtain sensitive information via a crafted w… CWE-200
Information Exposure 		CVE-2016-3273 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm
266622 2.8 LOW
Local 		microsoft windows_server_2012
windows_7
windows_10
windows_rt_8.1 		The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles page-fault system calls, which allows local users to obtain sensitive inf… CWE-200
Information Exposure 		CVE-2016-3272 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm
266623 6.5 MEDIUM
Network 		microsoft edge The VBScript engine in Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability." CWE-200
Information Exposure 		CVE-2016-3271 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm
266624 8.8 HIGH
Network 		microsoft edge The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3269 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm
266625 8.8 HIGH
Network 		microsoft edge The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3265 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm
266626 7.5 HIGH
Network 		microsoft internet_explorer
edge 		Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Br… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3264 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm
266627 5.3 MEDIUM
Network 		microsoft internet_explorer Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." CWE-200
Information Exposure 		CVE-2016-3261 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm
266628 8.8 HIGH
Network 		microsoft edge
internet_explorer 		The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrar… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3260 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm
266629 8.8 HIGH
Network 		microsoft internet_explorer
edge 		The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execut… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3259 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm
266630 4.7 MEDIUM
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_rt_8.1 		Race condition in the kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Low Integrity protection mechanis… CWE-264
CWE-362
Permissions, Privileges, and Access Controls
Race Condition 		CVE-2016-3258 2024-11-21 11:49 2016-07-13 Show GitHub Exploit DB Packet Storm