Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
243101 7.5 危険 chris simon
Joomla!		 - Joomla! の abbrev コンポーネントにおける任意のローカルファイルをインクルードおよび実行される脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0985 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
243102 5 警告 Acidcat - Acidcat CMS における資格情報を含むデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0984 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
243103 7.5 危険 Acidcat - Acidcat CMS におけるインストールプロセスを再起動される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0976 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
243104 7.5 危険 Joomla!
g4j.laoneo		 - Joomla! 用 GCalendar コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0972 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
243105 2.1 注意 ATutor - ATutor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0971 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
243106 7.5 危険 fr.simon rundell
TYPO3 Association		 - TYPO3 の pd_diocesedatabase 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1013 2012-06-26 16:19 2008-07-9 Show GitHub Exploit DB Packet Storm
243107 7.5 危険 geekhelps - Geekhelps ADMP の bannershow.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0968 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
243108 5.1 警告 geekhelps - Geekhelps ADMP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0967 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
243109 6.8 警告 deV!L'z Clanportal - DZCP の inc/config.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0966 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
243110 5 警告 アップル - Apple AirPort Express などの FTP プロキシサーバにおけるイントラネット FTP サーバから TCP 転送をされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0962 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267571 9.8 CRITICAL
Network 		php
opensuse
fedoraproject 		php
leap
fedora 		The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4542 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
267572 9.8 CRITICAL
Network 		fedoraproject
php
opensuse 		fedora
php
leap 		The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds… NVD-CWE-Other
CVE-2016-4541 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
267573 9.8 CRITICAL
Network 		fedoraproject
opensuse
php 		fedora
leap
php 		The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bound… NVD-CWE-Other
CVE-2016-4540 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
267574 9.8 CRITICAL
Network 		php
opensuse
fedoraproject 		php
leap
fedora 		The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segment… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4539 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
267575 9.8 CRITICAL
Network 		php
fedoraproject
opensuse 		php
fedora
leap 		The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_… CWE-20
 Improper Input Validation  		CVE-2016-4538 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
267576 9.8 CRITICAL
Network 		php
opensuse
fedoraproject 		php
leap
fedora 		The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause … CWE-20
 Improper Input Validation  		CVE-2016-4537 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
267577 6.0 MEDIUM
Local 		qemu
canonical
debian 		qemu
ubuntu_linux
debian_linux 		The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of servi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4441 2024-11-21 11:52 2016-05-20 Show GitHub Exploit DB Packet Storm
267578 6.7 MEDIUM
Local 		canonical
qemu
debian 		ubuntu_linux
qemu
debian_linux 		The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4439 2024-11-21 11:52 2016-05-20 Show GitHub Exploit DB Packet Storm
267579 8.4 HIGH
Local 		oracle
xen 		vm_server
xen 		The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-4480 2024-11-21 11:52 2016-05-18 Show GitHub Exploit DB Packet Storm
267580 7.5 HIGH
Network 		jansson_project jansson Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data. CWE-20
 Improper Input Validation  		CVE-2016-4425 2024-11-21 11:52 2016-05-17 Show GitHub Exploit DB Packet Storm