Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242411 7.8 危険 シスコシステムズ - Cisco UWN Solution におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2979 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
242412 10 危険 シスコシステムズ - Cisco UWN Solution におけるアクセス制限を回避される脆弱性 CWE-310
暗号の問題 		CVE-2010-2978 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
242413 10 危険 シスコシステムズ - Cisco UWN Solution における詳細不明の脆弱性 CWE-16
環境設定 		CVE-2010-2977 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
242414 10 危険 シスコシステムズ - Cisco UWN Solution のコントローラにおけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-2976 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
242415 2.1 注意 シスコシステムズ - Cisco UWN Solution におけるパスワードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2010-2975 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
242416 5.1 警告 Fedora Project - SSSD の auth_send 関数における pam_authenticate の認証要求を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-2940 2012-06-26 16:19 2010-08-30 Show GitHub Exploit DB Packet Storm
242417 7.5 危険 av scripts - AV Scripts AV Arcade における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2933 2012-06-26 16:19 2010-08-5 Show GitHub Exploit DB Packet Storm
242418 9.3 危険 BarCodeWiz, Inc. - BarCodeWiz BarCode ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2932 2012-06-26 16:19 2010-08-5 Show GitHub Exploit DB Packet Storm
242419 7.5 危険 ali kenan - AKY Blog の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2922 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
242420 6.8 警告 foobla
Joomla!		 - Joomla! の foobla_suggestions コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2920 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266531 4.3 MEDIUM
Network 		cybozu office Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function. CWE-200
Information Exposure 		CVE-2016-4867 2024-11-21 11:53 2017-04-18 Show GitHub Exploit DB Packet Storm
266532 4.8 MEDIUM
Network 		cybozu office Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Project function. CWE-79
Cross-site Scripting 		CVE-2016-4866 2024-11-21 11:53 2017-04-18 Show GitHub Exploit DB Packet Storm
266533 4.8 MEDIUM
Network 		cybozu office Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Customapp function. CWE-79
Cross-site Scripting 		CVE-2016-4865 2024-11-21 11:53 2017-04-18 Show GitHub Exploit DB Packet Storm
266534 5.3 MEDIUM
Network 		zohocorp servicedesk_plus ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a co… CWE-254
 7PK - Security Features 		CVE-2016-4890 2024-11-21 11:53 2017-04-15 Show GitHub Exploit DB Packet Storm
266535 8.8 HIGH
Network 		zohocorp servicedesk_plus ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-4889 2024-11-21 11:53 2017-04-15 Show GitHub Exploit DB Packet Storm
266536 5.4 MEDIUM
Network 		zohocorp servicedesk_plus Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2016-4888 2024-11-21 11:53 2017-04-15 Show GitHub Exploit DB Packet Storm
266537 6.1 MEDIUM
Network 		databox_project
userbox_project
assist_project 		databox_plugin
userbox_plugin
assist_plugin 		Multiple cross-site scripting (XSS) vulnerabilities in the IVYWE (1) Assist plugin before 1.1.2.test20160906, (2) dataBox plugin before 0.0.0.20160906, and (3) userBox plugin before 0.0.0.20160906 fo… CWE-79
Cross-site Scripting 		CVE-2016-4875 2024-11-21 11:53 2017-04-15 Show GitHub Exploit DB Packet Storm
266538 9.8 CRITICAL
Network 		novastor novabackup_datacenter The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors. CWE-20
 Improper Input Validation  		CVE-2016-4899 2024-11-21 11:53 2017-04-14 Show GitHub Exploit DB Packet Storm
266539 9.8 CRITICAL
Network 		novastor novabackup_datacenter The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors. CWE-20
 Improper Input Validation  		CVE-2016-4898 2024-11-21 11:53 2017-04-14 Show GitHub Exploit DB Packet Storm
266540 7.5 HIGH
Network 		netty
redhat
apache 		netty
jboss_data_grid
jboss_middleware_text-only_advisories
cassandra 		handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop). CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2016-4970 2024-11-21 11:53 2017-04-13 Show GitHub Exploit DB Packet Storm