Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
243351 4 警告 Apache Software Foundation - IBM WebSphere Application Server などで使用される Apache MyFaces における任意の EL 宣言文を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2086 2012-06-26 16:19 2010-05-27 Show GitHub Exploit DB Packet Storm
243352 5 警告 シスコシステムズ - Cisco Scientific Atlanta WebSTAR DPC2100R2 ケーブルモデムの Web インターフェースにおける特権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-2082 2012-06-26 16:19 2010-05-26 Show GitHub Exploit DB Packet Storm
243353 7.5 危険 Apache Software Foundation - Apache ServiceMix などで使用される Apache CXF における任意のファイルを読まれ任意の HTTP リクエストをサーバに送信される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2076 2012-06-26 16:19 2010-06-16 Show GitHub Exploit DB Packet Storm
243354 3.3 注意 GNU Project - GNU gv における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-2056 2012-06-26 16:19 2010-06-6 Show GitHub Exploit DB Packet Storm
243355 3.3 注意 emesene - emesene の emesenelib/ProfileManager.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-2053 2012-06-26 16:19 2010-06-7 Show GitHub Exploit DB Packet Storm
243356 7.5 危険 debliteck - Debliteck DBCart の article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2051 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
243357 4.3 警告 ActiveHelper
Joomla!		 - Joomla! の ActiveHelper LiveHelp (com_activehelper_livehelp) コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2046 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
243358 7.5 危険 Joomla!
dionesoft		 - Joomla! の Dione Form Wizard コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2045 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
243359 7.5 危険 Joomla!
adhie utomo		 - Joomla! 用の Konsultasi コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2044 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
243360 6.8 警告 gpEasy - gpEasy CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2039 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267201 9.9 CRITICAL
Network 		lshell_project lshell lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6902 2024-11-21 11:57 2017-04-25 Show GitHub Exploit DB Packet Storm
267202 4.6 MEDIUM
Physics 		redhat quickstart_cloud_installer The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the d… CWE-200
Information Exposure 		CVE-2016-7060 2024-11-21 11:57 2017-04-15 Show GitHub Exploit DB Packet Storm
267203 8.6 HIGH
Network 		fasterxml jackson-dataformat-xml XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via ve… CWE-611
CWE-918
XXE
Server-Side Request Forgery (SSRF)  		CVE-2016-7051 2024-11-21 11:57 2017-04-15 Show GitHub Exploit DB Packet Storm
267204 7.0 HIGH
Local 		todd_miller sudo sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function. CWE-284
Improper Access Control 		CVE-2016-7032 2024-11-21 11:57 2017-04-15 Show GitHub Exploit DB Packet Storm
267205 7.5 HIGH
Network 		botan_project botan The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set in the enum value. CWE-320
 Key Management Errors 		CVE-2016-6879 2024-11-21 11:57 2017-04-11 Show GitHub Exploit DB Packet Storm
267206 9.8 CRITICAL
Network 		botan_project botan The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors related to undefined behavior, as demonstra… CWE-20
 Improper Input Validation  		CVE-2016-6878 2024-11-21 11:57 2017-04-11 Show GitHub Exploit DB Packet Storm
267207 6.1 MEDIUM
Network 		jqueryui
oracle
fedoraproject
netapp
redhat
juniper
debian 		jquery_ui
weblogic_server
business_intelligence
hospitality_cruise_fleet_management
application_express
primavera_unifier
siebel_ui_framework
oss_support_tools
fedora
snapc… 		Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function. CWE-79
Cross-site Scripting 		CVE-2016-7103 2024-11-21 11:57 2017-03-16 Show GitHub Exploit DB Packet Storm
267208 5.5 MEDIUM
Local 		libgd libgd The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file, related t… CWE-125
Out-of-bounds Read 		CVE-2016-6906 2024-11-21 11:57 2017-03-15 Show GitHub Exploit DB Packet Storm
267209 6.1 MEDIUM
Network 		plone plone Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web… CWE-79
Cross-site Scripting 		CVE-2016-7140 2024-11-21 11:57 2017-03-8 Show GitHub Exploit DB Packet Storm
267210 6.1 MEDIUM
Network 		plone plone Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting 		CVE-2016-7139 2024-11-21 11:57 2017-03-8 Show GitHub Exploit DB Packet Storm