Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242911	4.3	警告	createch-group	-	LiSK CMS の cp/edit_email.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2013	2012-06-26 16:19	2010-05-24	Show	GitHub Exploit DB Packet Storm

242912	4.3	警告	Angry Donuts Drupal	-	Drupal の Chaos Tool Suite モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2010	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

242913	9.3	危険	AB Team	-	BS.Global BS.Player のメディアライブラリにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2009	2012-06-26 16:19	2010-05-21	Show	GitHub Exploit DB Packet Storm

242914	7.5	危険	datalifecms	-	DLE における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-2005	2012-06-26 16:19	2010-05-20	Show	GitHub Exploit DB Packet Storm

242915	9.3	危険	AB Team	-	BS.Global BS.Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2004	2012-06-26 16:19	2010-05-20	Show	GitHub Exploit DB Packet Storm

242916	2.1	注意	Drupal jeff warrington	-	Drupal の Wordfilter モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2002	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242917	6.8	警告	Joomla! Fabrik	-	Joomla! 用 Fabrik コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1981	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

242918	6.8	警告	affiliatefeeds Joomla!	-	Joomla! 用の Affiliate Datafeeds コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1979	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

242919	6.8	警告	freephpblogsoftware	-	FreePHPBlogSoftware の default_theme.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-1978	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

242920	7.5	危険	Joomla! gohigheris	-	Joomla! 用の J!WHMCS integrator コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1977	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266691	9.8	CRITICAL Network	huawei	rh1288_v3_server_firmware rh2288_v3_server_firmware rh2288h_v3_server_firmware xh620_v3_server_firmware xh622_v3_server_firmware xh628_v3_server_firmware	Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC…	CWE-285 Improper Authorization	CVE-2016-6825	2024-11-21 11:56	2016-09-8	Show	GitHub Exploit DB Packet Storm

266692	7.5	HIGH Network	fedoraproject opensuse canonical gnome	fedora leap opensuse ubuntu_linux eye_of_gnome	Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds wr…	CWE-787 Out-of-bounds Write	CVE-2016-6855	2024-11-21 11:56	2016-09-8	Show	GitHub Exploit DB Packet Storm

266693	8.1	HIGH Network	cisco	media_origination_system_suite	Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PA…	CWE-287 Improper Authentication	CVE-2016-6377	2024-11-21 11:56	2016-09-4	Show	GitHub Exploit DB Packet Storm

266694	8.6	HIGH Network	vbulletin	vbulletin	The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2016-6483	2024-11-21 11:56	2016-09-2	Show	GitHub Exploit DB Packet Storm

266695	6.5	MEDIUM Adjacent	cisco	wireless_lan_controller wireless_lan_controller_7.2 wireless_lan_controller_7.0 wireless_lan_controller_7.4 wireless_lan_controller_6.0 wireless_lan_controller_7.1	The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows r…	CWE-399 Resource Management Errors	CVE-2016-6376	2024-11-21 11:56	2016-09-2	Show	GitHub Exploit DB Packet Storm

266696	9.8	CRITICAL Network	citrix	xenapp xendesktop	Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.	CWE-254 7PK - Security Features	CVE-2016-6493	2024-11-21 11:56	2016-08-20	Show	GitHub Exploit DB Packet Storm

266697	8.6	HIGH Network	sophos	mobile_control_eas_proxy	Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the r…	CWE-254 7PK - Security Features	CVE-2016-6597	2024-11-21 11:56	2016-08-10	Show	GitHub Exploit DB Packet Storm

266698	7.8	HIGH Local	siemens	sinema_server	Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-6486	2024-11-21 11:56	2016-08-8	Show	GitHub Exploit DB Packet Storm

266699	7.5	HIGH Network	openbsd fedoraproject	openssh fedora	The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (cryp…	CWE-20 Improper Input Validation	CVE-2016-6515	2024-11-21 11:56	2016-08-8	Show	GitHub Exploit DB Packet Storm

266700	8.8	HIGH Network	wordpress	wordpress	Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authent…	CWE-352 Origin Validation Error	CVE-2016-6635	2024-11-21 11:56	2016-08-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed