Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243031 5 警告 cookex
Joomla!
- Joomla! の Cookex Agency ckforms コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1345 2012-06-26 16:19 2010-04-9 Show GitHub Exploit DB Packet Storm
243032 7.5 危険 cookex
Joomla!
- Joomla! の Cookex Agency ckforms コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1344 2012-06-26 16:19 2010-04-9 Show GitHub Exploit DB Packet Storm
243033 7.5 危険 bjsintay - SiteX における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1343 2012-06-26 16:19 2010-04-9 Show GitHub Exploit DB Packet Storm
243034 6.8 警告 directnews - Direct News における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-1342 2012-06-26 16:19 2010-04-9 Show GitHub Exploit DB Packet Storm
243035 5 警告 ermenegildo fiorito - Irmin CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1309 2012-06-26 16:19 2010-04-8 Show GitHub Exploit DB Packet Storm
243036 5 警告 decryptweb
Joomla!
- Joomla! の dwgraphs コンポーネントの dwgraphs.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1302 2012-06-26 16:19 2010-04-7 Show GitHub Exploit DB Packet Storm
243037 7.5 危険 The Cacti Group - Cacti の templates_export.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1431 2012-06-26 16:19 2009-06-28 Show GitHub Exploit DB Packet Storm
243038 5.1 警告 dynpg - DynPG CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-1299 2012-06-26 16:19 2010-04-7 Show GitHub Exploit DB Packet Storm
243039 4.3 警告 bbsxp - BBSXP 2008 SP2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1276 2012-06-26 16:19 2010-04-6 Show GitHub Exploit DB Packet Storm
243040 4.3 警告 bbsxp - BBSXP 2008 の ShowPost.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1275 2012-06-26 16:19 2010-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267091 7.5 HIGH
Network
debian
opensuse
libgd
canonical
debian_linux
leap
libgd
ubuntu_linux
The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application cras… CWE-20
 Improper Input Validation 
CVE-2016-6128 2024-11-21 11:55 2016-08-7 Show GitHub Exploit DB Packet Storm
267092 5.5 MEDIUM
Local
linux
oracle
linux_kernel
linux
vm_server
The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service… CWE-284
Improper Access Control
CVE-2016-6198 2024-11-21 11:55 2016-08-7 Show GitHub Exploit DB Packet Storm
267093 5.5 MEDIUM
Local
oracle
linux
linux
linux_kernel
vm_server
fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing,… CWE-20
 Improper Input Validation 
CVE-2016-6197 2024-11-21 11:55 2016-08-7 Show GitHub Exploit DB Packet Storm
267094 7.8 HIGH
Local
linux linux_kernel The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor … CWE-264
CWE-119
Permissions, Privileges, and Access Controls
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-6187 2024-11-21 11:55 2016-08-7 Show GitHub Exploit DB Packet Storm
267095 7.8 HIGH
Local
linux linux_kernel net/core/skbuff.c in the Linux kernel 4.7-rc6 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via certain IPv6 socket operations. CWE-20
 Improper Input Validation 
CVE-2016-6162 2024-11-21 11:55 2016-08-7 Show GitHub Exploit DB Packet Storm
267096 5.1 MEDIUM
Local
linux linux_kernel Race condition in the ec_device_ioctl_xcmd function in drivers/platform/chrome/cros_ec_dev.c in the Linux kernel before 4.7 allows local users to cause a denial of service (out-of-bounds array access… CWE-362
Race Condition
CVE-2016-6156 2024-11-21 11:55 2016-08-7 Show GitHub Exploit DB Packet Storm
267097 4.7 MEDIUM
Local
linux linux_kernel Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call … CWE-362
Race Condition
CVE-2016-6136 2024-11-21 11:55 2016-08-7 Show GitHub Exploit DB Packet Storm
267098 6.1 MEDIUM
Network
debian
djangoproject
debian_linux
django
Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, an… CWE-79
Cross-site Scripting
CVE-2016-6186 2024-11-21 11:55 2016-08-6 Show GitHub Exploit DB Packet Storm
267099 9.8 CRITICAL
Network
sap hana The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass intended access restrictions and possibly have unspecified ot… CWE-284
Improper Access Control
CVE-2016-6150 2024-11-21 11:55 2016-08-5 Show GitHub Exploit DB Packet Storm
267100 5.5 MEDIUM
Local
sap hana_sps09 SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941. CWE-200
Information Exposure
CVE-2016-6149 2024-11-21 11:55 2016-08-5 Show GitHub Exploit DB Packet Storm