Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243361	2.1	注意	gpEasy	-	gpEasy CMS の include/tool/editing_files.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2038	2012-06-26 16:19	2010-05-25	Show	GitHub Exploit DB Packet Storm

243362	4.3	警告	Caucho Technology	-	Caucho Technology Resin Professional の resin-admin/digest.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2032	2012-06-26 16:19	2010-05-24	Show	GitHub Exploit DB Packet Storm

243363	4.3	警告	alan palazzolo Drupal	-	Drupal の External Link Page モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2030	2012-06-26 16:19	2010-05-24	Show	GitHub Exploit DB Packet Storm

243364	6.4	警告	シスコシステムズ	-	Cisco Scientific Atlanta WebSTAR DPC2100R2 ケーブルモデムの Web インターフェースにおける認証を迂回される脆弱性	CWE-287 不適切な認証	CVE-2010-2026	2012-06-26 16:19	2010-05-26	Show	GitHub Exploit DB Packet Storm

243365	6.8	警告	シスコシステムズ	-	Cisco Scientific Atlanta WebSTAR DPC2100R2 ケーブルモデムの Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-2025	2012-06-26 16:19	2010-05-26	Show	GitHub Exploit DB Packet Storm

243366	4.4	警告	Exim Development	-	Exim の transports/appendfile.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-2024	2012-06-26 16:19	2010-05-25	Show	GitHub Exploit DB Packet Storm

243367	4.4	警告	Exim Development	-	Exim の transports/appendfile.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-2023	2012-06-26 16:19	2010-05-25	Show	GitHub Exploit DB Packet Storm

243368	3.3	注意	FreeBSD	-	FreeBSD の jail の jail.c における任意のファイルを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2022	2012-06-26 16:19	2010-05-27	Show	GitHub Exploit DB Packet Storm

243369	6.9	警告	FreeBSD	-	FreeBSD のカーネルの NFS クライアントにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2020	2012-06-26 16:19	2010-05-27	Show	GitHub Exploit DB Packet Storm

243370	6.8	警告	bukulokomedia	-	Lokomedia CMS の downlot.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2019	2012-06-26 16:19	2010-05-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268461	7.5	HIGH Network	wordpress	wordpress	The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5836	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268462	7.5	HIGH Network	wordpress	wordpress	WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.php and wp-admin/re…	CWE-200 Information Exposure	CVE-2016-5835	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268463	6.1	MEDIUM Network	wordpress	wordpress	Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HT…	CWE-79 Cross-site Scripting	CVE-2016-5834	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268464	6.1	MEDIUM Network	wordpress	wordpress	Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web scri…	CWE-79 Cross-site Scripting	CVE-2016-5833	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268465	7.5	HIGH Network	wordpress	wordpress	The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5832	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268466	7.8	HIGH Local	debian linux novell canonical	debian_linux linux_kernel suse_linux_enterprise_real_time_extension ubuntu_linux	Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly hav…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-5829	2024-11-21 11:55	2016-06-27	Show	GitHub Exploit DB Packet Storm

268467	7.8	HIGH Local	linux novell debian canonical	linux_kernel suse_linux_enterprise_real_time_extension debian_linux ubuntu_linux	The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service…	CWE-20 Improper Input Validation	CVE-2016-5828	2024-11-21 11:55	2016-06-27	Show	GitHub Exploit DB Packet Storm

268468	4.6	MEDIUM Network	netapp	snap_creator_framework	NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2016-5710	2024-11-21 11:54	2020-02-11	Show	GitHub Exploit DB Packet Storm

268469	7.8	HIGH Local	symantec	norton_antivirus norton_family norton_antivirus_with_backup norton_security norton_360 norton_internet_security norton_security_with_backup endpoint_protection endpoint_protec…	A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Pr…	CWE-427 Uncontrolled Search Path Element	CVE-2016-5311	2024-11-21 11:54	2020-01-10	Show	GitHub Exploit DB Packet Storm

268470	5.5	MEDIUM Local	google	android	An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when processing an accept system call by the user process on AF_M…	CWE-200 Information Exposure	CVE-2016-5346	2024-11-21 11:54	2020-01-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed