Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
243141 7.5 危険 commodityrentals - CommodityRentals Video Games Rentals の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0690 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
243142 10 危険 DATEV - DATEV Base System の DVBSExeCall.ocx における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2010-0689 2012-06-26 16:19 2010-02-26 Show GitHub Exploit DB Packet Storm
243143 5 警告 Digium - Asterisk Open Source のダイアルプラン機能のデザインにおけるダイアルプランへ文字列を挿入される脆弱性 CWE-DesignError
CVE-2010-0685 2012-06-26 16:19 2010-02-10 Show GitHub Exploit DB Packet Storm
243144 3.5 注意 Apache Software Foundation - Apache ActiveMQ の createDestination.action におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0684 2012-06-26 16:19 2010-04-5 Show GitHub Exploit DB Packet Storm
243145 4.3 警告 bgsvetionik - BGSvetionik BGS CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0675 2012-06-26 16:19 2010-02-22 Show GitHub Exploit DB Packet Storm
243146 5 警告 2enetworx - StatCounteX におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0674 2012-06-26 16:19 2010-02-22 Show GitHub Exploit DB Packet Storm
243147 7.5 危険 WordPress.org
copperleaf		 - WordPress の Copperleaf Photolog プラグインの cplphoto.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0673 2012-06-26 16:19 2010-02-22 Show GitHub Exploit DB Packet Storm
243148 9.3 危険 アップル
Google		 - Google Chrome における Chrome サンドボックス内の任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0659 2012-06-26 16:19 2010-02-18 Show GitHub Exploit DB Packet Storm
243149 2.6 注意 アップル - Google Chrome および Apple Safari の WebKit におけるポップアップウィンドウ上の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0650 2012-06-26 16:19 2010-02-18 Show GitHub Exploit DB Packet Storm
243150 9.3 危険 アップル
Google		 - Google Chrome で使用される WebKit における Chrome サンドボックス内の任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0647 2012-06-26 16:19 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267871 5.5 MEDIUM
Local 		uclouvain
fedoraproject 		openjpeg
fedora 		Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE:… CWE-369
 Divide By Zero 		CVE-2016-4797 2024-11-21 11:52 2017-02-4 Show GitHub Exploit DB Packet Storm
267872 5.5 MEDIUM
Local 		uclouvain
fedoraproject 		openjpeg
fedora 		Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4796 2024-11-21 11:52 2017-02-4 Show GitHub Exploit DB Packet Storm
267873 5.5 MEDIUM
Local 		mini-xml_project
debian 		mini-xml
debian_linux 		The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file. CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-4571 2024-11-21 11:52 2017-02-4 Show GitHub Exploit DB Packet Storm
267874 5.5 MEDIUM
Local 		mini-xml_project
debian 		mini-xml
debian_linux 		The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file. CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-4570 2024-11-21 11:52 2017-02-4 Show GitHub Exploit DB Packet Storm
267875 7.5 HIGH
Network 		cakephp cakephp The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header. CWE-20
 Improper Input Validation  		CVE-2016-4793 2024-11-21 11:52 2017-01-24 Show GitHub Exploit DB Packet Storm
267876 6.8 MEDIUM
Physics 		cryptsetup_project cryptsetup The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password. CWE-287
Improper Authentication 		CVE-2016-4484 2024-11-21 11:52 2017-01-24 Show GitHub Exploit DB Packet Storm
267877 6.1 MEDIUM
Network 		roundcube webmail Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message. CWE-79
Cross-site Scripting 		CVE-2016-4552 2024-11-21 11:52 2016-12-21 Show GitHub Exploit DB Packet Storm
267878 5.5 MEDIUM
Local 		redhat enterprise_virtualization Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2016-4443 2024-11-21 11:52 2016-12-15 Show GitHub Exploit DB Packet Storm
267879 4.4 MEDIUM
Network 		phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the u… CWE-254
 7PK - Security Features 		CVE-2016-4412 2024-11-21 11:52 2016-12-11 Show GitHub Exploit DB Packet Storm
267880 7.5 HIGH
Network 		hp system_management_homepage HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4396 2024-11-21 11:52 2016-10-29 Show GitHub Exploit DB Packet Storm