Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250921	5	警告	salvo g. tomaselli	-	Weborf の modURL 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3306	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

250922	3.5	注意	MantisBT Group	-	MantisBT におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3303	2012-03-27 18:42	2010-08-4	Show	GitHub Exploit DB Packet Storm

250923	2.1	注意	Linux	-	Linux kernel の eql_g_master_cfg におけるカーネルスタックメモリから重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3297	2012-03-27 18:42	2010-09-30	Show	GitHub Exploit DB Packet Storm

250924	4.3	警告	pecl-php	-	APC 拡張の apc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3294	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

250925	4.3	警告	ヒューレット・パッカード	-	HP AssetCenter および AssetManager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3291	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

250926	6.5	警告	ヒューレット・パッカード	-	HP SIM における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-3290	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

250927	4.3	警告	ヒューレット・パッカード	-	HP SIM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3289	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

250928	6.8	警告	ヒューレット・パッカード	-	HP SIM におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3288	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

250929	8.3	危険	ヒューレット・パッカード	-	複数の HP 製品における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3287	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

250930	5	警告	ヒューレット・パッカード	-	HP SIM における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-3286	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268521	7.5	HIGH Network	apache	openmeetings	The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified pro…	CWE-200 Information Exposure	CVE-2016-2164	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

268522	6.1	MEDIUM Network	apache	openmeetings	Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event.	CWE-79 Cross-site Scripting	CVE-2016-2163	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

268523	7.3	HIGH Network	debian rubyonrails	debian_linux ruby_on_rails rails	Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of t…	CWE-20 Improper Input Validation	CVE-2016-2098	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

268524	5.3	MEDIUM Network	rubyonrails	ruby_on_rails rails	Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted u…	CWE-22 Path Traversal	CVE-2016-2097	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

268525	7.5	HIGH Network	nodejs fedoraproject	node.js fedora	Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.	CWE-20 Improper Input Validation	CVE-2016-2086	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

268526	9.8	CRITICAL Network	hp	asset_manager asset_manager_cloudsystem_chargeback	HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache C…	CWE-19 Data Processing Errors	CVE-2016-2000	2024-11-21 11:47	2016-04-6	Show	GitHub Exploit DB Packet Storm

268527	5.5	MEDIUM Local	apple	ibooks_author	Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, relat…	NVD-CWE-Other	CVE-2016-1789	2024-11-21 11:47	2016-04-6	Show	GitHub Exploit DB Packet Storm

268528	6.2	MEDIUM Local	apple	iphone_os	The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app.	CWE-284 Improper Access Control	CVE-2016-1760	2024-11-21 11:47	2016-03-30	Show	GitHub Exploit DB Packet Storm

268529	5.9	MEDIUM Network	apple	watchos iphone_os mac_os_x	Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachmen…	CWE-310 Cryptographic Issues	CVE-2016-1788	2024-11-21 11:47	2016-03-24	Show	GitHub Exploit DB Packet Storm

268530	5.3	MEDIUM Network	apple	mac_os_x_server	Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors.	CWE-200 Information Exposure	CVE-2016-1787	2024-11-21 11:47	2016-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed