Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243071	5	警告	geopp	-	Geo++ GNCASTER の HTTP authentication 実装における他のユーザの認証ヘッダを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-0551	2012-06-26 16:19	2010-02-4	Show	GitHub Exploit DB Packet Storm

243072	4	警告	geopp	-	Geo++ GNCASTER の admin.htm における HTTP Basic Authentication を使用される脆弱性	CWE-287 不適切な認証	CVE-2010-0550	2012-06-26 16:19	2010-02-4	Show	GitHub Exploit DB Packet Storm

243073	5	警告	アップルフリービット株式会社	-	iPod touch の FreeBit ServersMan におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0496	2012-06-26 16:19	2010-02-3	Show	GitHub Exploit DB Packet Storm

243074	7.5	危険	enanocms	-	Enano CMS のコメント登録インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0471	2012-06-26 16:19	2010-02-2	Show	GitHub Exploit DB Packet Storm

243075	4.3	警告	comtrend	-	Comtrend CT-507IT ADSL ルータの scvrtsrv.cmd におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0470	2012-06-26 16:19	2010-02-2	Show	GitHub Exploit DB Packet Storm

243076	7.5	危険	files2links	-	Files2Links F2L 3000 機器における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0469	2012-06-26 16:19	2010-02-2	Show	GitHub Exploit DB Packet Storm

243077	5	警告	Chill Creations Joomla!	-	Joomla! の ccNewsletter コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0467	2012-06-26 16:19	2010-02-2	Show	GitHub Exploit DB Packet Storm

243078	7.5	危険	a3malnet	-	magic-portal の home.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0457	2012-06-26 16:19	2010-01-28	Show	GitHub Exploit DB Packet Storm

243079	7.5	危険	fabricadigital	-	Publique! の cgi/cgilua.exe/sys/start.htm における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0454	2012-06-26 16:19	2010-01-28	Show	GitHub Exploit DB Packet Storm

243080	5	警告	Digium	-	Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0441	2012-06-26 16:19	2010-02-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268111	7.2	HIGH Network	paloaltonetworks	pan-os	The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote au…	CWE-20 Improper Input Validation	CVE-2016-3654	2024-11-21 11:50	2016-04-13	Show	GitHub Exploit DB Packet Storm

268112	7.5	HIGH Network	huawei	s5300_firmware s5700_firmware s7700_firmware s9300_firmware s9700_firmware	Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.	CWE-20 Improper Input Validation	CVE-2016-3678	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

268113	6.4	MEDIUM Adjacent	huawei	e3276s_firmware	Huawei E3276s USB modems with software before E3276s-150TCPU-V200R002B436D09SP00C00 allow man-in-the-middle attackers to intercept, spoof, or modify network traffic via unspecified vectors related to…	CWE-254 7PK - Security Features	CVE-2016-3676	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

268114	8.1	HIGH Network	huawei	policy_center_firmware	SQL injection vulnerability in Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to syste…	CWE-89 SQL Injection	CVE-2016-3675	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

268115	8.8	HIGH Network	cacti	cacti	SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the host_group_data parameter.	CWE-89 SQL Injection	CVE-2016-3659	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

268116	8.8	HIGH Network	google canonical opensuse	v8 ubuntu_linux opensuse chrome	Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unkn…	NVD-CWE-noinfo	CVE-2016-3679	2024-11-21 11:50	2016-03-29	Show	GitHub Exploit DB Packet Storm

268117	5.4	MEDIUM Network	thoughtbot	administrate	Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code.	CWE-352 Origin Validation Error	CVE-2016-3098	2024-11-21 11:49	2022-08-6	Show	GitHub Exploit DB Packet Storm

268118	5.5	MEDIUM Local	uclouvain	openjpeg	The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3182	2024-11-21 11:49	2020-02-20	Show	GitHub Exploit DB Packet Storm

268119	6.5	MEDIUM Network	cloudera	cloudera_manager	Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2016-3192	2024-11-21 11:49	2019-11-26	Show	GitHub Exploit DB Packet Storm

268120	6.5	MEDIUM Network	cloudera	cdh	Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.	CWE-863 Incorrect Authorization	CVE-2016-3131	2024-11-21 11:49	2019-11-26	Show	GitHub Exploit DB Packet Storm