Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250851	7.5	危険	jurpo	-	Jurpopage の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4360	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250852	7.5	危険	jurpo	-	Jurpopage の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4359	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250853	4.3	警告	mrcgiguy	-	MCG Guestbook の gb.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4358	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250854	7.5	危険	boka	-	SiteEngine の comments.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4357	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250855	7.5	危険	site2nite	-	Site2Nite Big Truck Broker の news_default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4356	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250856	3.5	注意	dadabik	-	DaDaBIK におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4355	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250857	5.1	警告	MantisBT Group	-	MantisBT の admin/upgrade_unattended.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4350	2012-03-27 18:42	2010-12-14	Show	GitHub Exploit DB Packet Storm

250858	5	警告	MantisBT Group	-	MantisBT の admin/upgrade_unattended.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4349	2012-03-27 18:42	2010-12-14	Show	GitHub Exploit DB Packet Storm

250859	4.3	警告	MantisBT Group	-	MantisBT の admin/upgrade_unattended.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4348	2012-03-27 18:42	2010-12-14	Show	GitHub Exploit DB Packet Storm

250860	7.1	危険	Linux	-	Linux kernel の aun_incoming 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4342	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269731	8.8	HIGH Network	suse opensuse oracle mozilla sil	linux_enterprise leap opensuse linux firefox graphite2	The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data …	CWE-19 Data Processing Errors	CVE-2016-2795	2024-11-21 11:48	2016-03-14	Show	GitHub Exploit DB Packet Storm

269732	8.8	HIGH Network	mozilla sil suse opensuse oracle	firefox graphite2 linux_enterprise leap opensuse linux	The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a de…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2794	2024-11-21 11:48	2016-03-14	Show	GitHub Exploit DB Packet Storm

269733	8.8	HIGH Network	oracle mozilla sil suse opensuse	linux firefox graphite2 linux_enterprise leap opensuse	CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2793	2024-11-21 11:48	2016-03-14	Show	GitHub Exploit DB Packet Storm

269734	8.8	HIGH Network	sil mozilla oracle suse opensuse	graphite2 firefox linux linux_enterprise leap opensuse	The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of ser…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2792	2024-11-21 11:48	2016-03-14	Show	GitHub Exploit DB Packet Storm

269735	8.8	HIGH Network	suse opensuse mozilla oracle sil	linux_enterprise leap opensuse firefox linux graphite2	The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (bu…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2791	2024-11-21 11:48	2016-03-14	Show	GitHub Exploit DB Packet Storm

269736	8.8	HIGH Network	suse opensuse mozilla sil oracle	linux_enterprise leap opensuse firefox graphite2 linux	The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data s…	CWE-19 Data Processing Errors	CVE-2016-2790	2024-11-21 11:48	2016-03-14	Show	GitHub Exploit DB Packet Storm

269737	5.9	MEDIUM Network	isc debian canonical	dhcp debian_linux ubuntu_linux	ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertio…	CWE-20 Improper Input Validation	CVE-2016-2774	2024-11-21 11:48	2016-03-10	Show	GitHub Exploit DB Packet Storm

269738	5.3	MEDIUM Network	google	chrome	The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remo…	CWE-200 Information Exposure	CVE-2016-2845	2024-11-21 11:48	2016-03-6	Show	GitHub Exploit DB Packet Storm

269739	8.8	HIGH Network	google	chrome	WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly determine when anonymous block wrappers may exist, which allows remote attackers to…	CWE-20 Improper Input Validation	CVE-2016-2844	2024-11-21 11:48	2016-03-6	Show	GitHub Exploit DB Packet Storm

269740	9.8	CRITICAL Network	google	chrome v8	Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause a denial of service or possibly have other impact via unkno…	NVD-CWE-noinfo	CVE-2016-2843	2024-11-21 11:48	2016-03-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed