Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243231 7.5 危険 ScriptsFeed.com - ScriptsFeed Scripts Directory の articlesdetails.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2906 2012-06-26 16:19 2010-07-28 Show GitHub Exploit DB Packet Storm
243232 7.5 危険 ScriptsFeed.com - ScriptsFeed Scripts Directory の info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2905 2012-06-26 16:19 2010-07-28 Show GitHub Exploit DB Packet Storm
243233 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC Celerra NAS 機器におけるユーザのデータディレクトリ内の任意のファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2860 2012-06-26 16:19 2010-08-5 Show GitHub Exploit DB Packet Storm
243234 5 警告 boesch-it - SimpNews の news.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-2859 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
243235 4.3 警告 boesch-it - SimpNews の news.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2858 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
243236 6.8 警告 Daniel James Scott - Joomla! 用の Music Manager コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-2857 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
243237 5 警告 gonzalo maser
Joomla!
- Joomla! 用の InterJoomla ArtForms コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-2848 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
243238 7.5 危険 gonzalo maser
Joomla!
- Joomla! 用の InterJoomla ArtForms コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2847 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
243239 4.3 警告 gonzalo maser
Joomla!
- Joomla! 用の InterJoomla ArtForms コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2846 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
243240 7.8 危険 シスコシステムズ - Cisco Unified Presence の PE サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-2840 2012-06-26 16:19 2010-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268091 7.5 HIGH
Network
mediawiki mediawiki MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights. CWE-284
Improper Access Control
CVE-2016-6337 2024-11-21 11:55 2017-04-21 Show GitHub Exploit DB Packet Storm
268092 6.5 MEDIUM
Network
mediawiki mediawiki MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restriction… CWE-284
Improper Access Control
CVE-2016-6336 2024-11-21 11:55 2017-04-21 Show GitHub Exploit DB Packet Storm
268093 7.5 HIGH
Network
mediawiki mediawiki MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head items in the context of a given title, which allows remote attackers to obtain sensitive information vi… CWE-200
Information Exposure
CVE-2016-6335 2024-11-21 11:55 2017-04-21 Show GitHub Exploit DB Packet Storm
268094 6.1 MEDIUM
Network
mediawiki mediawiki Cross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbi… CWE-79
Cross-site Scripting
CVE-2016-6334 2024-11-21 11:55 2017-04-21 Show GitHub Exploit DB Packet Storm
268095 6.1 MEDIUM
Network
mediawiki mediawiki Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrar… CWE-79
Cross-site Scripting
CVE-2016-6333 2024-11-21 11:55 2017-04-21 Show GitHub Exploit DB Packet Storm
268096 7.5 HIGH
Network
mediawiki mediawiki MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers to obtain sensitive information by leveraging failure to ter… CWE-200
Information Exposure
CVE-2016-6332 2024-11-21 11:55 2017-04-21 Show GitHub Exploit DB Packet Storm
268097 7.5 HIGH
Network
mediawiki mediawiki ApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to bypass intended per-title read restrictions via a parse action to api.php. CWE-284
Improper Access Control
CVE-2016-6331 2024-11-21 11:55 2017-04-21 Show GitHub Exploit DB Packet Storm
268098 7.8 HIGH
Local
fedoraproject
mock_project
fedora
scm_plugin
The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-6299 2024-11-21 11:55 2017-04-15 Show GitHub Exploit DB Packet Storm
268099 9.8 CRITICAL
Network
sap hana SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806. CWE-284
Improper Access Control
CVE-2016-6143 2024-11-21 11:55 2017-04-13 Show GitHub Exploit DB Packet Storm
268100 6.1 MEDIUM
Network
redhat resteasy JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack. CWE-79
Cross-site Scripting
CVE-2016-6348 2024-11-21 11:55 2017-04-13 Show GitHub Exploit DB Packet Storm