Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243121 3.3 注意 FUSE - FUSE の fusermount における任意の共有 FUSE ファイルシステムをマウント解除される脆弱性 CWE-59
リンク解釈の問題
CVE-2010-0789 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243122 5 警告 fipsasp - fipsForum におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0765 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243123 7.5 危険 commodityrentals - CommodityRentals Vacation Rental Software の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0763 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243124 7.5 危険 commodityrentals - CommodityRentals CD Rental Software の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0762 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243125 7.5 危険 commodityrentals - CommodityRentals Books/eBooks Rentals Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0761 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243126 6.8 警告 Joomla!
greatjoomla
- Joomla! 用 Core Design Scriptegrator プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0760 2012-06-26 16:19 2010-02-26 Show GitHub Exploit DB Packet Storm
243127 7.5 危険 Joomla!
greatjoomla
- Joomla! 用 Core Design Scriptegrator プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0759 2012-06-26 16:19 2010-02-26 Show GitHub Exploit DB Packet Storm
243128 7.5 危険 componentslab
Joomla!
- Joomla! の SQL Reports コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0753 2012-06-26 16:19 2010-02-26 Show GitHub Exploit DB Packet Storm
243129 5 警告 Drupal
Earl Dunovant
- Drupal 用 Node Type モジュール の week_post_page 関数におけるノード一覧を読み取られる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0752 2012-06-26 16:19 2010-02-24 Show GitHub Exploit DB Packet Storm
243130 2.1 注意 freedesktop.org - PolicyKit の libpolkit における任意のファイルの存在を特定される脆弱性 CWE-200
情報漏えい
CVE-2010-0750 2012-06-26 16:19 2010-03-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267301 4.9 MEDIUM
Network
oracle mysql Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB. NVD-CWE-noinfo
CVE-2016-5436 2024-11-21 11:54 2016-07-21 Show GitHub Exploit DB Packet Storm
267302 5.9 MEDIUM
Network
misys fusioncapital_opics_plus Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate. NVD-CWE-Other
CVE-2016-5655 2024-11-21 11:54 2016-07-20 Show GitHub Exploit DB Packet Storm
267303 7.5 HIGH
Network
misys fusioncapital_opics_plus Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-5654 2024-11-21 11:54 2016-07-20 Show GitHub Exploit DB Packet Storm
267304 6.5 MEDIUM
Network
misys fusioncapital_opics_plus Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter. CWE-89
SQL Injection
CVE-2016-5653 2024-11-21 11:54 2016-07-20 Show GitHub Exploit DB Packet Storm
267305 8.1 HIGH
Network
redhat
hp
oracle
apache
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_serv…
Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted cli… CWE-284
Improper Access Control
CVE-2016-5388 2024-11-21 11:54 2016-07-19 Show GitHub Exploit DB Packet Storm
267306 8.1 HIGH
Network
apache
hp
oracle
fedoraproject
redhat
debian
canonical
opensuse
http_server
system_management_homepage
enterprise_manager_ops_center
solaris
linux
communications_user_data_repository
fedora
jboss_web_server
jboss_enterprise_web_server
j…
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, wh… NVD-CWE-noinfo
CVE-2016-5387 2024-11-21 11:54 2016-07-19 Show GitHub Exploit DB Packet Storm
267307 8.1 HIGH
Network
fedoraproject
oracle
redhat
golang
fedora
linux
enterprise_linux_server_aus
enterprise_linux_server
enterprise_linux_server_eus
go
The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client da… CWE-284
Improper Access Control
CVE-2016-5386 2024-11-21 11:54 2016-07-19 Show GitHub Exploit DB Packet Storm
267308 8.1 HIGH
Network
oracle
fedoraproject
hp
php
redhat
debian
opensuse
drupal
enterprise_manager_ops_center
communications_user_data_repository
linux
fedora
storeever_msl6480_tape_library_firmware
system_management_homepage
php
enterprise_linux_desktop
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY envi… CWE-601
Open Redirect
CVE-2016-5385 2024-11-21 11:54 2016-07-19 Show GitHub Exploit DB Packet Storm
267309 8.8 HIGH
Network
accela civic_platform_citizen_access_portal Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and … CWE-284
Improper Access Control
CVE-2016-5661 2024-11-21 11:54 2016-07-16 Show GitHub Exploit DB Packet Storm
267310 6.1 MEDIUM
Network
accela civic_platform Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid paramet… CWE-79
Cross-site Scripting
CVE-2016-5660 2024-11-21 11:54 2016-07-16 Show GitHub Exploit DB Packet Storm