Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242921	7.5	危険	cmstactics Joomla!	-	Joomla! の beeheard コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1952	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

242922	6.8	警告	60cycle	-	60cycleCMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1951	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

242923	6.8	警告	Joomla! emultisoft	-	Joomla! 用 Online News Paper Manager コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1950	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

242924	7.5	危険	Joomla! emultisoft	-	Joomla! 用 Online News Paper Manager コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1949	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

242925	4.3	警告	アップルマイクロソフト	-	Apple Safari における重要な情報を取得され脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-1940	2012-06-26 16:19	2010-05-14	Show	GitHub Exploit DB Packet Storm

242926	7.5	危険	CubeCart Limited	-	CubeCart PHP Shopping cart の includes/content/cart.inc.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1931	2012-06-26 16:19	2010-06-9	Show	GitHub Exploit DB Packet Storm

242927	7.5	危険	29o3 cms	-	29o3 CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-1922	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242928	7.1	危険	DELL EMC (旧 EMC Corporation)	-	EMC Avamar におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1919	2012-06-26 16:19	2010-05-28	Show	GitHub Exploit DB Packet Storm

242929	7.5	危険	eFront Learning	-	eFront の ask_chat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1918	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242930	9.3	危険	コンソナ	-	Consona Live Assistance の SdcWebSecureBase インターフェースの pluginlicense.ini のデフォルト設定における ActiveX 実行に対する制限を回避される脆弱性	CWE-16 環境設定	CVE-2010-1913	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266691	9.8	CRITICAL Network	huawei	rh1288_v3_server_firmware rh2288_v3_server_firmware rh2288h_v3_server_firmware xh620_v3_server_firmware xh622_v3_server_firmware xh628_v3_server_firmware	Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC…	CWE-285 Improper Authorization	CVE-2016-6825	2024-11-21 11:56	2016-09-8	Show	GitHub Exploit DB Packet Storm

266692	7.5	HIGH Network	fedoraproject opensuse canonical gnome	fedora leap opensuse ubuntu_linux eye_of_gnome	Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds wr…	CWE-787 Out-of-bounds Write	CVE-2016-6855	2024-11-21 11:56	2016-09-8	Show	GitHub Exploit DB Packet Storm

266693	8.1	HIGH Network	cisco	media_origination_system_suite	Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PA…	CWE-287 Improper Authentication	CVE-2016-6377	2024-11-21 11:56	2016-09-4	Show	GitHub Exploit DB Packet Storm

266694	8.6	HIGH Network	vbulletin	vbulletin	The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2016-6483	2024-11-21 11:56	2016-09-2	Show	GitHub Exploit DB Packet Storm

266695	6.5	MEDIUM Adjacent	cisco	wireless_lan_controller wireless_lan_controller_7.2 wireless_lan_controller_7.0 wireless_lan_controller_7.4 wireless_lan_controller_6.0 wireless_lan_controller_7.1	The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows r…	CWE-399 Resource Management Errors	CVE-2016-6376	2024-11-21 11:56	2016-09-2	Show	GitHub Exploit DB Packet Storm

266696	9.8	CRITICAL Network	citrix	xenapp xendesktop	Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.	CWE-254 7PK - Security Features	CVE-2016-6493	2024-11-21 11:56	2016-08-20	Show	GitHub Exploit DB Packet Storm

266697	8.6	HIGH Network	sophos	mobile_control_eas_proxy	Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the r…	CWE-254 7PK - Security Features	CVE-2016-6597	2024-11-21 11:56	2016-08-10	Show	GitHub Exploit DB Packet Storm

266698	7.8	HIGH Local	siemens	sinema_server	Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-6486	2024-11-21 11:56	2016-08-8	Show	GitHub Exploit DB Packet Storm

266699	7.5	HIGH Network	openbsd fedoraproject	openssh fedora	The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (cryp…	CWE-20 Improper Input Validation	CVE-2016-6515	2024-11-21 11:56	2016-08-8	Show	GitHub Exploit DB Packet Storm

266700	8.8	HIGH Network	wordpress	wordpress	Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authent…	CWE-352 Origin Validation Error	CVE-2016-6635	2024-11-21 11:56	2016-08-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed