Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242931	9.3	危険	コンソナ	-	Consona Live Assistance の SdcWebSecureBase インターフェースにおける ActiveX 実行上で制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1912	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242932	9.3	危険	コンソナ	-	Consona Live Assistance の SdcWebSecureBase インターフェースの site-locking 実装における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2010-1911	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242933	5.1	警告	コンソナ	-	Consona Live Assistance の Forgot Password 実装における空白の Hint 質問および空白の Hint 答えを持つアカウントのパスワードをリセットされる脆弱性	CWE-287 不適切な認証	CVE-2010-1910	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242934	7.6	危険	コンソナ	-	Consona Live Assistance の tgctlcm.dll の SdcUser.TgConCtl ActiveX コントロールの RunCmd メソッドにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1909	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242935	9.3	危険	コンソナ	-	Consona Live Assistance の tgctlcm.dll の SdcUser.TgConCtl ActiveX コントロールにおける任意のプログラムを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1908	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242936	4.3	警告	コンソナ	-	Consona Live Assistance の SdcUser.TgConCtl ActiveX コントロールにおける特定のユーザディレクトリへのパス名を特定される脆弱性	CWE-200 情報漏えい	CVE-2010-1907	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242937	7.2	危険	コンソナ	-	Consona Dynamic Agent などの tgsrv.exe における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2010-1906	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242938	4.3	警告	コンソナ	-	Consona Live Assistance および他の製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1905	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242939	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC RKM C Client における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1904	2012-06-26 16:19	2010-06-7	Show	GitHub Exploit DB Packet Storm

242940	7.5	危険	blueflyingfish.no-ip Joomla!	-	Joomla! 用の OrgChart コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1878	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266871	5.3	MEDIUM Network	redhat	jboss_bpm_suite	Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via…	CWE-200 Information Exposure	CVE-2016-6344	2024-11-21 11:55	2016-09-8	Show	GitHub Exploit DB Packet Storm

266872	8.8	HIGH Local	ibm	mq_appliance_firmware	MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (1) Disaster Recovery or (2) High Availability command.	CWE-20 Improper Input Validation	CVE-2016-5879	2024-11-21 11:55	2016-09-2	Show	GitHub Exploit DB Packet Storm

266873	5.3	MEDIUM Network	latchset	jwcrypto	The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain clearte…	CWE-200 Information Exposure	CVE-2016-6298	2024-11-21 11:55	2016-09-2	Show	GitHub Exploit DB Packet Storm

266874	9.8	CRITICAL Network	vbulletin	vbulletin	SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via…	CWE-89 SQL Injection	CVE-2016-6195	2024-11-21 11:55	2016-08-31	Show	GitHub Exploit DB Packet Storm

266875	7.8	HIGH Local	cisco	anyconnect_secure_mobility_client	Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-6369	2024-11-21 11:55	2016-08-26	Show	GitHub Exploit DB Packet Storm

266876	5.9	MEDIUM Network	kaspersky	safe_browser	Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.	CWE-200 Information Exposure	CVE-2016-6231	2024-11-21 11:55	2016-08-26	Show	GitHub Exploit DB Packet Storm

266877	3.3	LOW Local	moxa	oncell_g3001_firmware oncell_g3100v2_firmware	Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by r…	CWE-200 Information Exposure	CVE-2016-5812	2024-11-21 11:55	2016-08-24	Show	GitHub Exploit DB Packet Storm

266878	9.8	CRITICAL Network	moxa	oncell_g3001_firmware oncell_g3100v2_firmware	Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain acc…	CWE-285 Improper Authorization	CVE-2016-5799	2024-11-21 11:55	2016-08-24	Show	GitHub Exploit DB Packet Storm

266879	6.1	MEDIUM Network	cisco	firepower_management_center	Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via unspec…	CWE-79 Cross-site Scripting	CVE-2016-6365	2024-11-21 11:55	2016-08-23	Show	GitHub Exploit DB Packet Storm

266880	7.5	HIGH Network	cisco	unified_communications_manager	The User Data Services (UDS) API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspec…	CWE-200 Information Exposure	CVE-2016-6364	2024-11-21 11:55	2016-08-23	Show	GitHub Exploit DB Packet Storm