Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242051	9.3	危険	コンソナ	-	Consona Live Assistance の SdcWebSecureBase インターフェースにおける ActiveX 実行上で制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1912	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242052	9.3	危険	コンソナ	-	Consona Live Assistance の SdcWebSecureBase インターフェースの site-locking 実装における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2010-1911	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242053	5.1	警告	コンソナ	-	Consona Live Assistance の Forgot Password 実装における空白の Hint 質問および空白の Hint 答えを持つアカウントのパスワードをリセットされる脆弱性	CWE-287 不適切な認証	CVE-2010-1910	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242054	7.6	危険	コンソナ	-	Consona Live Assistance の tgctlcm.dll の SdcUser.TgConCtl ActiveX コントロールの RunCmd メソッドにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1909	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242055	9.3	危険	コンソナ	-	Consona Live Assistance の tgctlcm.dll の SdcUser.TgConCtl ActiveX コントロールにおける任意のプログラムを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1908	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242056	4.3	警告	コンソナ	-	Consona Live Assistance の SdcUser.TgConCtl ActiveX コントロールにおける特定のユーザディレクトリへのパス名を特定される脆弱性	CWE-200 情報漏えい	CVE-2010-1907	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242057	7.2	危険	コンソナ	-	Consona Dynamic Agent などの tgsrv.exe における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2010-1906	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242058	4.3	警告	コンソナ	-	Consona Live Assistance および他の製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1905	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242059	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC RKM C Client における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1904	2012-06-26 16:19	2010-06-7	Show	GitHub Exploit DB Packet Storm

242060	7.5	危険	blueflyingfish.no-ip Joomla!	-	Joomla! 用の OrgChart コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1878	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266601	9.8	CRITICAL Network	php	php	Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly hav…	CWE-190 Integer Overflow or Wraparound	CVE-2016-3078	2024-11-21 11:49	2016-08-7	Show	GitHub Exploit DB Packet Storm

266602	7.8	HIGH Local	debian linux	debian_linux linux_kernel	The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of …	CWE-476 NULL Pointer Dereference	CVE-2016-3070	2024-11-21 11:49	2016-08-7	Show	GitHub Exploit DB Packet Storm

266603	5.4	MEDIUM Network	fortinet	fortimanager_firmware fortianalyzer_firmware	Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users…	CWE-79 Cross-site Scripting	CVE-2016-3196	2024-11-21 11:49	2016-08-5	Show	GitHub Exploit DB Packet Storm

266604	6.1	MEDIUM Network	redhat	satellite	Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via a group name, related to viewing snapshot data.	CWE-79 Cross-site Scripting	CVE-2016-3097	2024-11-21 11:49	2016-08-5	Show	GitHub Exploit DB Packet Storm

266605	6.1	MEDIUM Network	redhat	satellite	Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via the (1) RHNMD User or (2) Filesystem parameters,…	CWE-79 Cross-site Scripting	CVE-2016-3080	2024-11-21 11:49	2016-08-5	Show	GitHub Exploit DB Packet Storm

266606	6.5	MEDIUM Network	mit	kerberos_5	The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses…	CWE-476 NULL Pointer Dereference	CVE-2016-3120	2024-11-21 11:49	2016-08-1	Show	GitHub Exploit DB Packet Storm

266607	5.4	MEDIUM Network	oracle	business_intelligence	Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidenti…	NVD-CWE-noinfo	CVE-2016-3433	2024-11-21 11:49	2016-07-21	Show	GitHub Exploit DB Packet Storm

266608	5.4	MEDIUM Network	oracle	business_intelligence_publisher	Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and …	NVD-CWE-noinfo	CVE-2016-3432	2024-11-21 11:49	2016-07-21	Show	GitHub Exploit DB Packet Storm

266609	4.9	MEDIUM Network	oracle	mysql	Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer.	NVD-CWE-noinfo	CVE-2016-3424	2024-11-21 11:49	2016-07-21	Show	GitHub Exploit DB Packet Storm

266610	8.1	HIGH Network	ibm	traveler	IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declara…	NVD-CWE-Other	CVE-2016-3039	2024-11-21 11:49	2016-07-18	Show	GitHub Exploit DB Packet Storm