Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242141 5 警告 gogoritas
Joomla!		 - Joomla! 用の Photo Battle コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1461 2012-06-26 16:19 2010-04-16 Show GitHub Exploit DB Packet Storm
242142 4.9 警告 GNUstep - GNUstep Base の gdomap の s/gdomap.c における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2010-1457 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
242143 5 警告 エフ・セキュア - F-Secure Internet Security 2010 における検知を回避される脆弱性 CWE-Other
その他 		CVE-2010-1425 2012-06-26 16:19 2010-04-15 Show GitHub Exploit DB Packet Storm
242144 10 危険 アップル - WebKit の page/Geolocation.cpp における詳細不明な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1386 2012-06-26 16:19 2010-08-19 Show GitHub Exploit DB Packet Storm
242145 7.5 危険 gamescript - GS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1368 2012-06-26 16:19 2010-04-13 Show GitHub Exploit DB Packet Storm
242146 7.5 危険 extremejoomla
Joomla!		 - Joomla! の j-projects コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1363 2012-06-26 16:19 2010-04-13 Show GitHub Exploit DB Packet Storm
242147 2.1 注意 ben jeavons
Drupal		 - Drupal の Own Term モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1362 2012-06-26 16:19 2010-01-13 Show GitHub Exploit DB Packet Storm
242148 4.3 警告 glarotech - PHPepperShop の shop/USER_ARTIKEL_HANDLING_AUFRUF.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1361 2012-06-26 16:19 2010-04-13 Show GitHub Exploit DB Packet Storm
242149 7.5 危険 boesch-it - FAQEngine における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1360 2012-06-26 16:19 2010-04-13 Show GitHub Exploit DB Packet Storm
242150 6.8 警告 xt:Commerce
bluegate		 - xt:Commerce 用の Direct URL モジュールの bluegate_seo.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1359 2012-06-26 16:19 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268861 8.1 HIGH
Network 		pngcrush-installer_project pngcrush-installer pngcrush-installer is an installer for Pngcrush. pngcrush-installer versions below 1.8.10 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause … CWE-310
Cryptographic Issues 		CVE-2016-10570 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268862 8.1 HIGH
Network 		geoip-lite-country_project geoip-lite-country geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM att… CWE-310
Cryptographic Issues 		CVE-2016-10568 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268863 8.1 HIGH
Network 		install-nw_project install-nw install-nw is a module which quickly and robustly installs and caches NW.js. install-nw versions below 1.1.5 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be… CWE-310
Cryptographic Issues 		CVE-2016-10566 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268864 8.1 HIGH
Network 		product-monitor_project product-monitor product-monitor is a HTML/JavaScript template for monitoring a product by encouraging product developers to gather all the information about the status of a product, including live monitoring, statis… CWE-310
Cryptographic Issues 		CVE-2016-10567 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268865 8.1 HIGH
Network 		groupon selenium-download selenium-download downloads the latest versions of the selenium standalone server and the chromedriver. selenium-download before 2.0.7 downloads binary resources over HTTP, which leaves it vulnerable… CWE-310
Cryptographic Issues 		CVE-2016-10559 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268866 8.1 HIGH
Network 		aerospike aerospike aerospike is an Aerospike add-on module for Node.js. aerospike versions below 2.4.2 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to caus… CWE-310
Cryptographic Issues 		CVE-2016-10558 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268867 7.5 HIGH
Network 		sequelizejs sequelize sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS In Postgres, SQLite, and Microso… CWE-89
SQL Injection 		CVE-2016-10556 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268868 9.8 CRITICAL
Network 		balderdash waterline-sequel waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's `like`, `contains`, `startsWith`, or `endsWith` will end up in waterline-s… CWE-89
SQL Injection 		CVE-2016-10551 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268869 9.8 CRITICAL
Network 		dwyl hapi-auth-jwt2 When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication. CWE-287
Improper Authentication 		CVE-2016-10525 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268870 9.8 CRITICAL
Network 		partclone_project partclone partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10722 2024-11-21 11:44 2018-05-3 Show GitHub Exploit DB Packet Storm