Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250891 4 警告 IBM - IBM WCM のオーサリングツールにおけるドラフト生成のアクセス制限を回避する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4806 2012-03-27 18:42 2010-11-16 Show GitHub Exploit DB Packet Storm
250892 7.5 危険 marcusg - PHP-Fusion の MG User-Fotoalbum モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4791 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
250893 5.8 警告 in-mediakg - FilterFTP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4790 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
250894 6.8 警告 PHP Web Scripts - PHP Web Scripts Easy Banner Free の member.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4784 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250895 2.6 注意 PHP Web Scripts - PHP Web Scripts Easy Banner Free の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4783 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250896 7.5 危険 softwebsnepal - Softwebs Nepal Ananda Real Estate の list.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4782 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250897 5 警告 enanocms - Enano CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4781 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250898 7.5 危険 enanocms - Enano CMS の check_banlist 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4780 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250899 4.3 警告 BraveNewCode
WordPress.org		 - WordPress の WPtouch プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4779 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250900 4.3 警告 Horde - Horde Groupware Webmail Edition のfetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4778 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268281 6.5 MEDIUM
Network 		google chrome WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload re… CWE-20
 Improper Input Validation  		CVE-2016-5135 2024-11-21 11:53 2016-07-24 Show GitHub Exploit DB Packet Storm
268282 8.8 HIGH
Network 		google chrome net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows rem… CWE-200
Information Exposure 		CVE-2016-5134 2024-11-21 11:53 2016-07-24 Show GitHub Exploit DB Packet Storm
268283 5.3 MEDIUM
Network 		google chrome Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authentication login prompt or trigger incorrect… CWE-287
Improper Authentication 		CVE-2016-5133 2024-11-21 11:53 2016-07-24 Show GitHub Exploit DB Packet Storm
268284 8.8 HIGH
Network 		google chrome The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows rem… CWE-254
 7PK - Security Features 		CVE-2016-5132 2024-11-21 11:53 2016-07-24 Show GitHub Exploit DB Packet Storm
268285 8.8 HIGH
Network 		google
xmlsoft
apple
canonical
redhat
suse
opensuse
debian 		chrome
libxml2
watchos
tvos
iphone_os
mac_os_x
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
ope… 		Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via… CWE-416
 Use After Free 		CVE-2016-5131 2024-11-21 11:53 2016-07-24 Show GitHub Exploit DB Packet Storm
268286 6.5 MEDIUM
Network 		google chrome content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL dis… CWE-284
Improper Access Control 		CVE-2016-5130 2024-11-21 11:53 2016-07-24 Show GitHub Exploit DB Packet Storm
268287 8.8 HIGH
Network 		google chrome
v8 		Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruptio… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5129 2024-11-21 11:53 2016-07-24 Show GitHub Exploit DB Packet Storm
268288 8.8 HIGH
Network 		google chrome
v8 		objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remot… CWE-254
 7PK - Security Features 		CVE-2016-5128 2024-11-21 11:53 2016-07-24 Show GitHub Exploit DB Packet Storm
268289 7.5 HIGH
Network 		google chrome Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly ha… CWE-416
 Use After Free 		CVE-2016-5127 2024-11-21 11:53 2016-07-24 Show GitHub Exploit DB Packet Storm
268290 9.8 CRITICAL
Network 		objective_systems asn1c Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of se… NVD-CWE-Other
CVE-2016-5080 2024-11-21 11:53 2016-07-20 Show GitHub Exploit DB Packet Storm