Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243141 7.5 危険 commodityrentals - CommodityRentals Video Games Rentals の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0690 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
243142 10 危険 DATEV - DATEV Base System の DVBSExeCall.ocx における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2010-0689 2012-06-26 16:19 2010-02-26 Show GitHub Exploit DB Packet Storm
243143 5 警告 Digium - Asterisk Open Source のダイアルプラン機能のデザインにおけるダイアルプランへ文字列を挿入される脆弱性 CWE-DesignError
CVE-2010-0685 2012-06-26 16:19 2010-02-10 Show GitHub Exploit DB Packet Storm
243144 3.5 注意 Apache Software Foundation - Apache ActiveMQ の createDestination.action におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0684 2012-06-26 16:19 2010-04-5 Show GitHub Exploit DB Packet Storm
243145 4.3 警告 bgsvetionik - BGSvetionik BGS CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0675 2012-06-26 16:19 2010-02-22 Show GitHub Exploit DB Packet Storm
243146 5 警告 2enetworx - StatCounteX におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0674 2012-06-26 16:19 2010-02-22 Show GitHub Exploit DB Packet Storm
243147 7.5 危険 WordPress.org
copperleaf
- WordPress の Copperleaf Photolog プラグインの cplphoto.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0673 2012-06-26 16:19 2010-02-22 Show GitHub Exploit DB Packet Storm
243148 9.3 危険 アップル
Google
- Google Chrome における Chrome サンドボックス内の任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0659 2012-06-26 16:19 2010-02-18 Show GitHub Exploit DB Packet Storm
243149 2.6 注意 アップル - Google Chrome および Apple Safari の WebKit におけるポップアップウィンドウ上の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0650 2012-06-26 16:19 2010-02-18 Show GitHub Exploit DB Packet Storm
243150 9.3 危険 アップル
Google
- Google Chrome で使用される WebKit における Chrome サンドボックス内の任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0647 2012-06-26 16:19 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267221 7.5 HIGH
Network
debian
haxx
opensuse
debian_linux
libcurl
leap
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leve… CWE-285
Improper Authorization
CVE-2016-5420 2024-11-21 11:54 2016-08-10 Show GitHub Exploit DB Packet Storm
267222 7.5 HIGH
Network
haxx
debian
opensuse
libcurl
debian_linux
leap
curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session. CWE-310
Cryptographic Issues
CVE-2016-5419 2024-11-21 11:54 2016-08-10 Show GitHub Exploit DB Packet Storm
267223 9.8 CRITICAL
Network
oracle
redhat
linux
enterprise_linux_server
enterprise_linux_workstation
Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary c… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-5408 2024-11-21 11:54 2016-08-10 Show GitHub Exploit DB Packet Storm
267224 6.1 MEDIUM
Network
vmware esxi
vcenter_server
CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified v… CWE-93
CRLF Injection
CVE-2016-5331 2024-11-21 11:54 2016-08-8 Show GitHub Exploit DB Packet Storm
267225 7.8 HIGH
Local
vmware workstation_player
workstation_pro
esxi
fusion
tools
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Pla… CWE-426
 Untrusted Search Path
CVE-2016-5330 2024-11-21 11:54 2016-08-8 Show GitHub Exploit DB Packet Storm
267226 7.8 HIGH
Local
google
linux
android
linux_kernel
The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Lin… CWE-20
 Improper Input Validation 
CVE-2016-5340 2024-11-21 11:54 2016-08-8 Show GitHub Exploit DB Packet Storm
267227 5.9 MEDIUM
Network
wireshark wireshark epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers to cause a denial of service (integer overflow and infinite … CWE-119
CWE-399
Incorrect Access of Indexable Resource ('Range Error') 
 Resource Management Errors
CVE-2016-5359 2024-11-21 11:54 2016-08-8 Show GitHub Exploit DB Packet Storm
267228 5.9 MEDIUM
Network
wireshark
oracle
wireshark
solaris
epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application … CWE-20
 Improper Input Validation 
CVE-2016-5358 2024-11-21 11:54 2016-08-8 Show GitHub Exploit DB Packet Storm
267229 5.9 MEDIUM
Network
wireshark
oracle
wireshark
solaris
wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial… CWE-20
 Improper Input Validation 
CVE-2016-5357 2024-11-21 11:54 2016-08-8 Show GitHub Exploit DB Packet Storm
267230 5.9 MEDIUM
Network
wireshark wireshark wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of se… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-5356 2024-11-21 11:54 2016-08-8 Show GitHub Exploit DB Packet Storm