Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242931	9.3	危険	コンソナ	-	Consona Live Assistance の SdcWebSecureBase インターフェースにおける ActiveX 実行上で制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1912	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242932	9.3	危険	コンソナ	-	Consona Live Assistance の SdcWebSecureBase インターフェースの site-locking 実装における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2010-1911	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242933	5.1	警告	コンソナ	-	Consona Live Assistance の Forgot Password 実装における空白の Hint 質問および空白の Hint 答えを持つアカウントのパスワードをリセットされる脆弱性	CWE-287 不適切な認証	CVE-2010-1910	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242934	7.6	危険	コンソナ	-	Consona Live Assistance の tgctlcm.dll の SdcUser.TgConCtl ActiveX コントロールの RunCmd メソッドにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1909	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242935	9.3	危険	コンソナ	-	Consona Live Assistance の tgctlcm.dll の SdcUser.TgConCtl ActiveX コントロールにおける任意のプログラムを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1908	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242936	4.3	警告	コンソナ	-	Consona Live Assistance の SdcUser.TgConCtl ActiveX コントロールにおける特定のユーザディレクトリへのパス名を特定される脆弱性	CWE-200 情報漏えい	CVE-2010-1907	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

242937	7.2	危険	コンソナ	-	Consona Dynamic Agent などの tgsrv.exe における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2010-1906	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242938	4.3	警告	コンソナ	-	Consona Live Assistance および他の製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1905	2012-06-26 16:19	2010-04-16	Show	GitHub Exploit DB Packet Storm

242939	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC RKM C Client における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1904	2012-06-26 16:19	2010-06-7	Show	GitHub Exploit DB Packet Storm

242940	7.5	危険	blueflyingfish.no-ip Joomla!	-	Joomla! 用の OrgChart コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1878	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268781	5.5	MEDIUM Local	canonical xen	ubuntu_linux xen	Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest OS users to cause a denial of service (guest OS crash) by attempting to…	CWE-20 Improper Input Validation	CVE-2016-3961	2024-11-21 11:51	2016-04-15	Show	GitHub Exploit DB Packet Storm

268782	7.3	HIGH Network	sap	hana	The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and …	CWE-284 Improper Access Control	CVE-2016-4018	2024-11-21 11:51	2016-04-14	Show	GitHub Exploit DB Packet Storm

268783	7.5	HIGH Network	sap	hana	The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified vectors, aka SAP Security Note 2262710.	NVD-CWE-noinfo	CVE-2016-4017	2024-11-21 11:51	2016-04-14	Show	GitHub Exploit DB Packet Storm

268784	6.1	MEDIUM Network	sap	java_as	Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attackers to inject arbitrary web script or HTML via the title par…	CWE-79 Cross-site Scripting	CVE-2016-4016	2024-11-21 11:51	2016-04-14	Show	GitHub Exploit DB Packet Storm

268785	7.5	HIGH Network	sap	netweaver	The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.	NVD-CWE-noinfo	CVE-2016-4015	2024-11-21 11:51	2016-04-14	Show	GitHub Exploit DB Packet Storm

268786	8.6	HIGH Network	sap	netweaver	XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service (system hang) via a crafted DTD in an XML request to ud…	NVD-CWE-Other	CVE-2016-4014	2024-11-21 11:51	2016-04-14	Show	GitHub Exploit DB Packet Storm

268787	9.8	CRITICAL Network	python	pillow	Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, whic…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4009	2024-11-21 11:51	2016-04-14	Show	GitHub Exploit DB Packet Storm

268788	8.8	HIGH Network	opensuse debian optipng_project canonical	leap opensuse debian_linux optipng ubuntu_linux	Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly e…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3982	2024-11-21 11:51	2016-04-14	Show	GitHub Exploit DB Packet Storm

268789	7.8	HIGH Local	optipng_project canonical debian	optipng ubuntu_linux debian_linux	Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or p…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3981	2024-11-21 11:51	2016-04-14	Show	GitHub Exploit DB Packet Storm

268790	9.8	CRITICAL Network	opensuse	leap opensuse	Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via…	NVD-CWE-noinfo	CVE-2016-4007	2024-11-21 11:51	2016-04-13	Show	GitHub Exploit DB Packet Storm