Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242851	6.8	警告	anodyne-productions	-	Anodyne Productions SIMM Management System (SMS) の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2313	2012-06-26 16:19	2010-06-17	Show	GitHub Exploit DB Packet Storm

242852	7.5	危険	evological	-	EvoLogical EvoCam の Web サーバにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2309	2012-06-26 16:19	2010-06-16	Show	GitHub Exploit DB Packet Storm

242853	6.8	警告	D-Link Systems, Inc.	-	Dlink Di-604 ルータの Ping ツール Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2293	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

242854	4.3	警告	D-Link Systems, Inc.	-	Dlink Di-604 ルータの Ping ツール Web インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2292	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

242855	10	危険	The Dojo Foundation	-	Dojo のビルド処理のディフォルト設定における詳細不明な脆弱性	CWE-16 環境設定	CVE-2010-2276	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

242856	4.3	警告	The Dojo Foundation	-	Dojo Toolkit SDK の dijit/tests/_testCommon.js におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2275	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

242857	4.3	警告	The Dojo Foundation	-	Dojo におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2010-2274	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

242858	4.3	警告	The Dojo Foundation	-	Dojo におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2273	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

242859	10	危険	The Dojo Foundation	-	Dojo の iframe_history.html における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2010-2272	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

242860	7.5	危険	Accoria Networks	-	Accoria Web Server の authcfg.cgi におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2010-2271	2012-06-26 16:19	2010-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266621	7.5	HIGH Network	imagely	nextgen_gallery	The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user t…	CWE-20 Improper Input Validation	CVE-2016-6565	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266622	7.5	HIGH Adjacent	mitel	shortel_mobility_client	On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position …	CWE-295 Improper Certificate Validation	CVE-2016-6562	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266623	9.8	CRITICAL Network	synology	ds107_firmware ds213_firmware ds116_firmware	Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A re…	CWE-255 Credentials Management	CVE-2016-6554	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266624	9.8	CRITICAL Network	nuuo	nt-4040_titan_firmware	Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulne…	CWE-255 Credentials Management	CVE-2016-6553	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266625	9.8	CRITICAL Network	greenpacket	dx-350_firmware	Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device.	CWE-255 Credentials Management	CVE-2016-6552	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266626	9.8	CRITICAL Network	intelliantech	v60_firmware v60ka_firmware v65_firmware v80g_firmware t80w_firmware t80q_firmware t100w_firmware t100q_firmware t110w_firmware t110q_firmware t130w_firmware t130q_fi…	Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access…	CWE-255 Credentials Management	CVE-2016-6551	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266627	4.3	MEDIUM Adjacent	nutspace	nut_mobile	The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute.	CWE-287 Improper Authentication	CVE-2016-6549	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266628	9.8	CRITICAL Network	nutspace	nut_mobile	The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse th…	CWE-200 Information Exposure	CVE-2016-6548	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266629	7.8	HIGH Local	nutspace	nut_mobile	The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6547	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266630	7.8	HIGH Local	kkmcn	itrackeasy	The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cl…	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6546	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed