Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243301	4.3	警告	アップル	-	WebKit におけるキーストロークを読み取られる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2441	2012-06-26 16:19	2010-06-24	Show	GitHub Exploit DB Packet Storm

243302	4.3	警告	AneCMS	-	AneCMS Blog の class/tools.class.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2437	2012-06-26 16:19	2010-06-24	Show	GitHub Exploit DB Packet Storm

243303	7.5	危険	AneCMS	-	AneCMS Blog の modules/blog/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2436	2012-06-26 16:19	2010-06-24	Show	GitHub Exploit DB Packet Storm

243304	7.5	危険	Activewebsoftwares	-	ActiveWebSoftwares.com eWebquiz の eWebQuiz.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2359	2012-06-26 16:19	2010-06-21	Show	GitHub Exploit DB Packet Storm

243305	7.5	危険	eicrasoft	-	Eicra Realestate Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2357	2012-06-26 16:19	2010-06-21	Show	GitHub Exploit DB Packet Storm

243306	6.8	警告	daniel mealha cabrita	-	Ziproxy の PNG デコーダにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2350	2012-06-26 16:19	2010-06-21	Show	GitHub Exploit DB Packet Storm

243307	9.3	危険	freesoftwaretoolbox	-	Batch Audio Converter Lite Edition におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2348	2012-06-26 16:19	2010-06-21	Show	GitHub Exploit DB Packet Storm

243308	9.3	危険	dennisre	-	D.R. Software Audio Converter におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2343	2012-06-26 16:19	2010-06-21	Show	GitHub Exploit DB Packet Storm

243309	7.5	危険	DMXReady	-	DMXReady Online Notebook Manager の onlinenotebookmanager.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2342	2012-06-26 16:19	2010-06-21	Show	GitHub Exploit DB Packet Storm

243310	7.5	危険	ezpx	-	EZPX Photoblog のにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-2341	2012-06-26 16:19	2010-06-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268761	6.1	MEDIUM Network	accellion	kiteworks_appliance	Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (…	CWE-79 Cross-site Scripting	CVE-2016-5663	2024-11-21 11:54	2016-08-27	Show	GitHub Exploit DB Packet Storm

268762	7.8	HIGH Local	accellion	kiteworks_appliance	Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors.	NVD-CWE-Other	CVE-2016-5662	2024-11-21 11:54	2016-08-27	Show	GitHub Exploit DB Packet Storm

268763	8.8	HIGH Network	redhat	cloudforms	The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."	CWE-284 Improper Access Control	CVE-2016-5383	2024-11-21 11:54	2016-08-26	Show	GitHub Exploit DB Packet Storm

268764	7.5	HIGH Network	ultravnc	repeater	UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP addre…	CWE-284 Improper Access Control	CVE-2016-5673	2024-11-21 11:54	2016-08-26	Show	GitHub Exploit DB Packet Storm

268765	9.8	CRITICAL Network	dlink d-link	dir-868l_firmware dir-822_firmware dir-880l_firmware dir-850l_firmare dir-895l_firmware dir-817l\(w\)_firmware dir-818l\(w\)_firmware dir-890l_firmware dir-823_firmware dir…	Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00W…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-5681	2024-11-21 11:54	2016-08-26	Show	GitHub Exploit DB Packet Storm

268766	7.5	HIGH Network	zmodo	zp-ibh-13w zp-ne-14-s	ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by using a recognized SSID valu…	CWE-284 Improper Access Control	CVE-2016-5650	2024-11-21 11:54	2016-08-24	Show	GitHub Exploit DB Packet Storm

268767	7.3	HIGH Network	rockwellautomation	1766-l32bxb 1766-l32bwaa 1766-l32awaa 1766-l32bwa 1766-l32awa 1766-l32bxba	Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote a…	CWE-284 Improper Access Control	CVE-2016-5645	2024-11-21 11:54	2016-08-24	Show	GitHub Exploit DB Packet Storm

268768	5.3	MEDIUM Network	theforeman	foreman	Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission containing a filter to obtain sensitive network interface information via a request to A…	CWE-200 Information Exposure	CVE-2016-5390	2024-11-21 11:54	2016-08-20	Show	GitHub Exploit DB Packet Storm

268769	7.5	HIGH Network	f5	big-ip_application_acceleration_manager big-ip_webaccelerator big-ip_analytics big-ip_domain_name_system big-ip_edge_gateway big-ip_access_policy_manager big-ip_local_traffic_manage…	The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.…	CWE-284 Improper Access Control	CVE-2016-5736	2024-11-21 11:54	2016-08-20	Show	GitHub Exploit DB Packet Storm

268770	7.8	HIGH Local	fedoraproject fontconfig_project debian canonical	fedora fontconfig debian_linux ubuntu_linux	fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cach…	CWE-415 Double Free	CVE-2016-5384	2024-11-21 11:54	2016-08-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed