Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
243291 7.5 危険 2daybiz - 2daybiz Web Template Software の customize.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2510 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
243292 4.3 警告 2daybiz - 2daybiz Web Template Software におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2509 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
243293 7.5 危険 2daybiz - 2daybiz Video Community Portal Script の user-profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2508 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
243294 2.9 注意 シスコシステムズ - Linksys WAP54Gv3 の debug.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2506 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
243295 5 警告 bogofilter - bogofilter の base64.c の base64 デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2494 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
243296 7.5 危険 2daybiz - 2daybiz Video Community Portal Script の video.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2459 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
243297 4.3 警告 2daybiz - 2daybiz Video Community Portal Script の video.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2458 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
243298 6.8 警告 codelib - Linker IMG の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2456 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
243299 4.3 警告 アップル - Apple Safari におけるなりすまし攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2454 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
243300 10 危険 freeciv - freeciv における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2010-2445 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267161 7.5 HIGH
Network 		pritunl pritunl-client A flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification leads to sensitive information leakage CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2016-7064 2024-11-21 11:57 2020-07-22 Show GitHub Exploit DB Packet Storm
267162 9.8 CRITICAL
Network 		pritunl pritunl-client A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation. CWE-22
Path Traversal 		CVE-2016-7063 2024-11-21 11:57 2020-07-22 Show GitHub Exploit DB Packet Storm
267163 9.8 CRITICAL
Network 		lexmark markvision_enterprise Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. ( CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-6918 2024-11-21 11:57 2020-03-10 Show GitHub Exploit DB Packet Storm
267164 9.8 CRITICAL
Network 		php ext-http A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attacker… CWE-704
 Incorrect Type Conversion or Cast 		CVE-2016-7398 2024-11-21 11:57 2019-09-7 Show GitHub Exploit DB Packet Storm
267165 9.8 CRITICAL
Network 		openstack magnum OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API acces… CWE-200
Information Exposure 		CVE-2016-7404 2024-11-21 11:57 2019-06-21 Show GitHub Exploit DB Packet Storm
267166 9.8 CRITICAL
Network 		redhat kie-server It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access… - CVE-2016-7043 2024-11-21 11:57 2019-05-16 Show GitHub Exploit DB Packet Storm
267167 5.5 MEDIUM
Local 		capstone-engine capstone Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c. CWE-125
Out-of-bounds Read 		CVE-2016-7151 2024-11-21 11:57 2019-05-15 Show GitHub Exploit DB Packet Storm
267168 7.8 HIGH
Local 		redhat jboss_enterprise_application_platform It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow any local user to connect to CLI and allow the user to execut… CWE-275
 Permission Issues 		CVE-2016-7066 2024-11-21 11:57 2018-09-11 Show GitHub Exploit DB Packet Storm
267169 5.9 MEDIUM
Network 		powerdns
debian 		authoritative
recursor
debian_linux 		An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insuf… CWE-20
 Improper Input Validation  		CVE-2016-7074 2024-11-21 11:57 2018-09-11 Show GitHub Exploit DB Packet Storm
267170 5.9 MEDIUM
Network 		powerdns
debian 		authoritative
recursor
debian_linux 		An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insuf… CWE-20
 Improper Input Validation  		CVE-2016-7073 2024-11-21 11:57 2018-09-11 Show GitHub Exploit DB Packet Storm