Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243001	7.5	危険	dev4u	-	dev4u CMS の go_target.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0951	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

243002	6.8	警告	bfs.kilu	-	Bigforum の profil.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0948	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

243003	4.3	警告	bbsmax	-	Max Network Technology BBSMAX の post.aspx におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0947	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

243004	4.3	警告	D-Link Systems, Inc.	-	D-LINK DKVM-IP8 の auth.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0936	2012-06-26 16:19	2010-03-8	Show	GitHub Exploit DB Packet Storm

243005	5	警告	アップルマイクロソフト	-	Apple Safari で使用されている CFNetwork の cfnetwork.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0925	2012-06-26 16:19	2010-03-3	Show	GitHub Exploit DB Packet Storm

243006	5	警告	アップルマイクロソフト	-	Apple Safari で使用されている CFNetwork の cfnetwork.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0924	2012-06-26 16:19	2010-03-3	Show	GitHub Exploit DB Packet Storm

243007	4.4	警告	GNU Project	-	emacs の movemail の lib-src/movemail.c における任意のメールボックスファイルを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0825	2012-06-26 16:19	2010-04-5	Show	GitHub Exploit DB Packet Storm

243008	7.5	危険	aleinbeen Invision Power Services, Inc	-	Invision Power Board の改訂版である (nv2) Awards の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0802	2012-06-26 16:19	2010-03-2	Show	GitHub Exploit DB Packet Storm

243009	3.5	注意	Autartica Joomla!	-	Joomla! の autartitarot コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0801	2012-06-26 16:19	2010-03-2	Show	GitHub Exploit DB Packet Storm

243010	7.5	危険	barnowl	-	BarnOwl におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0793	2012-06-26 16:19	2010-03-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268161	7.5	HIGH Network	ibm	bigfix_remote_control	IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication. IBM X-Force ID: 5512.	CWE-284 Improper Access Control	CVE-2016-2930	2024-11-21 11:49	2017-05-4	Show	GitHub Exploit DB Packet Storm

268162	6.5	MEDIUM Network	kallithea	kallithea	Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-3114	2024-11-21 11:49	2017-04-25	Show	GitHub Exploit DB Packet Storm

268163	5.5	MEDIUM Local	python	pillow	Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3076	2024-11-21 11:49	2017-04-25	Show	GitHub Exploit DB Packet Storm

268164	9.8	CRITICAL Network	shopware	shopware	The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code.	CWE-20 Improper Input Validation	CVE-2016-3109	2024-11-21 11:49	2017-04-22	Show	GitHub Exploit DB Packet Storm

268165	9.8	CRITICAL Network	cygwin	cygwin	Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-3067	2024-11-21 11:49	2017-04-22	Show	GitHub Exploit DB Packet Storm

268166	5.4	MEDIUM Network	ibm	cognos_business_intelligence	IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential…	CWE-79 Cross-site Scripting	CVE-2016-3038	2024-11-21 11:49	2017-04-18	Show	GitHub Exploit DB Packet Storm

268167	5.7	MEDIUM Network	ibm	cognos_business_intelligence	IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM …	CWE-200 Information Exposure	CVE-2016-3037	2024-11-21 11:49	2017-04-18	Show	GitHub Exploit DB Packet Storm

268168	7.5	HIGH Network	ibm	cognos_business_intelligence	IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker could exploit this vulnerability to cause a denial o…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3036	2024-11-21 11:49	2017-04-18	Show	GitHub Exploit DB Packet Storm

268169	7.5	HIGH Network	mongodb	mongodb	mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveraging in-memory database representa…	CWE-400 Uncontrolled Resource Consumption	CVE-2016-3104	2024-11-21 11:49	2017-04-15	Show	GitHub Exploit DB Packet Storm

268170	5.3	MEDIUM Network	pulpproject	pulp	Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner.	CWE-362 Race Condition	CVE-2016-3106	2024-11-21 11:49	2017-04-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed