Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243321 4.3 警告 The Dojo Foundation - Dojo におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2010-2274 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
243322 4.3 警告 The Dojo Foundation - Dojo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2273 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
243323 10 危険 The Dojo Foundation - Dojo の iframe_history.html における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2010-2272 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
243324 7.5 危険 Accoria Networks - Accoria Web Server の authcfg.cgi におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2010-2271 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
243325 7.5 危険 Accoria Networks - Accoria Web Server におけるセッションをハイジャックされる脆弱性 CWE-310
暗号の問題
CVE-2010-2270 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
243326 5 警告 Accoria Networks - Accoria Web Server の loadstatic.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-2269 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
243327 6.8 警告 Accoria Networks - Accoria Web Server の authcfg.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-2268 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
243328 4.3 警告 Accoria Networks - Accoria Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2267 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
243329 4.3 警告 アップル
マイクロソフト
- Apple Safari の CSS 実装における訪問した Web ページに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-2264 2012-06-26 16:19 2010-06-7 Show GitHub Exploit DB Packet Storm
243330 5 警告 galileo students - Galileo Students Team Weborf におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-2262 2012-06-26 16:19 2010-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267601 5.5 MEDIUM
Local
lepton_project lepton The process_file function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (crash) via a crafted jpeg file. CWE-20
 Improper Input Validation 
CVE-2016-6234 2024-11-21 11:55 2017-02-3 Show GitHub Exploit DB Packet Storm
267602 7.2 HIGH
Network
ibm spectrum_scale
general_parallel_file_system
IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-6115 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267603 6.5 MEDIUM
Local
ibm tivoli_storage_manager
tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware
IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user. CWE-255
Credentials Management
CVE-2016-6110 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267604 7.5 HIGH
Network
ibm urbancode_deploy IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties. CWE-200
Information Exposure
CVE-2016-6068 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267605 3.1 LOW
Network
ibm forms_experience_builder IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for some information disclosure of internal resources. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2016-6001 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267606 3.7 LOW
Network
ibm sterling_selling_and_fulfillment_foundation IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error pa… CWE-200
Information Exposure
CVE-2016-5953 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267607 5.4 MEDIUM
Network
ibm kenexa_lms IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le… CWE-79
Cross-site Scripting
CVE-2016-5942 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267608 5.7 MEDIUM
Network
ibm kenexa_lms IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitra… CWE-22
Path Traversal
CVE-2016-5941 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267609 5.4 MEDIUM
Network
ibm kenexa_lms IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le… CWE-79
Cross-site Scripting
CVE-2016-5940 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267610 3.3 LOW
Local
ibm kenexa_lms IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system. CWE-200
Information Exposure
CVE-2016-5938 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm