Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250831 4.3 警告 Nullsoft - Winamp の in_mp4 プラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-4373 2012-03-27 18:42 2010-11-27 Show GitHub Exploit DB Packet Storm
250832 9.3 危険 Nullsoft - Winamp の in_nsv プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-4372 2012-03-27 18:42 2010-11-27 Show GitHub Exploit DB Packet Storm
250833 9.3 危険 Nullsoft - Winamp の in_mod プラグインにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4371 2012-03-27 18:42 2010-11-27 Show GitHub Exploit DB Packet Storm
250834 9.3 危険 Nullsoft - Winamp の in_midi プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-4370 2012-03-27 18:42 2010-11-27 Show GitHub Exploit DB Packet Storm
250835 6.4 警告 Laurent Destailleur - AWStats におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4369 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
250836 7.5 危険 Laurent Destailleur - AWStats における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4368 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
250837 6 警告 Bharat Mediratta - Menalto Gallery の modules/gallery/models/item.php における任意コードを実行される脆弱性 CWE-Other
その他
CVE-2010-4353 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
250838 4.3 警告 Apache Software Foundation - libcloud における証明書偽造の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4340 2012-03-27 18:42 2011-09-12 Show GitHub Exploit DB Packet Storm
250839 4.3 警告 hypermail-project - Hypermail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4339 2012-03-27 18:42 2011-01-14 Show GitHub Exploit DB Packet Storm
250840 6.2 警告 jwilk - ocrodjvu における任意のファイルを変更される脆弱性 CWE-59
リンク解釈の問題
CVE-2010-4338 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269111 8.8 HIGH
Network
ibm connections Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary … CWE-352
 Origin Validation Error
CVE-2016-3007 2024-11-21 11:49 2016-09-26 Show GitHub Exploit DB Packet Storm
269112 5.4 MEDIUM
Network
ibm connections Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or H… CWE-79
Cross-site Scripting
CVE-2016-3006 2024-11-21 11:49 2016-09-26 Show GitHub Exploit DB Packet Storm
269113 5.4 MEDIUM
Network
ibm connections Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or H… CWE-79
Cross-site Scripting
CVE-2016-3003 2024-11-21 11:49 2016-09-26 Show GitHub Exploit DB Packet Storm
269114 5.4 MEDIUM
Network
ibm connections Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or H… CWE-79
Cross-site Scripting
CVE-2016-3001 2024-11-21 11:49 2016-09-26 Show GitHub Exploit DB Packet Storm
269115 4.3 MEDIUM
Network
ibm connections The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service (service degradation) via a crafted URL. CWE-20
 Improper Input Validation 
CVE-2016-3000 2024-11-21 11:49 2016-09-26 Show GitHub Exploit DB Packet Storm
269116 6.5 MEDIUM
Network
ibm connections IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to obtain sensitive information via an unspecified brute-force attack. CWE-200
Information Exposure
CVE-2016-2999 2024-11-21 11:49 2016-09-26 Show GitHub Exploit DB Packet Storm
269117 7.8 HIGH
Local
microsoft excel
excel_viewer
office_compatibility_pack
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3381 2024-11-21 11:49 2016-09-14 Show GitHub Exploit DB Packet Storm
269118 6.1 MEDIUM
Network
microsoft exchange_server Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request, a… CWE-79
Cross-site Scripting
CVE-2016-3379 2024-11-21 11:49 2016-09-14 Show GitHub Exploit DB Packet Storm
269119 7.4 HIGH
Network
microsoft exchange_server Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 allows remote attackers… CWE-20
 Improper Input Validation 
CVE-2016-3378 2024-11-21 11:49 2016-09-14 Show GitHub Exploit DB Packet Storm
269120 7.5 HIGH
Network
microsoft edge The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3377 2024-11-21 11:49 2016-09-14 Show GitHub Exploit DB Packet Storm