Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250931	4.3	警告	Mozilla Foundation Yahoo!	-	Bugzilla で使用される YUI の Flash コンポーネント構造におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4209	2012-03-27 18:42	2010-11-7	Show	GitHub Exploit DB Packet Storm

250932	4.3	警告	Moodle Yahoo! Mozilla Foundation	-	Bugzilla などの製品で使用される YUI の Flash コンポーネント構造におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4208	2012-03-27 18:42	2010-11-7	Show	GitHub Exploit DB Packet Storm

250933	4.9	警告	Linux	-	Linux kernel の net/rds/rdma.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4175	2012-03-27 18:42	2011-01-10	Show	GitHub Exploit DB Packet Storm

250934	7.8	危険	Linux	-	Linux kernel の x25_parse_facilities 関数における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4164	2012-03-27 18:42	2011-01-3	Show	GitHub Exploit DB Packet Storm

250935	4.3	警告	Moodle Yahoo! Mozilla Foundation	-	Bugzilla などの製品で使用される YUI の Flash コンポーネント構造におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4207	2012-03-27 18:42	2010-11-7	Show	GitHub Exploit DB Packet Storm

250936	7.5	危険	onlinetechtools.com	-	OWOS の process.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4186	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

250937	7.5	危険	energine	-	Energine における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4185	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

250938	5	警告	netsupportsoftware	-	NSM における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2010-4184	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

250939	4.3	警告	htmlpurifier マイクロソフト	-	HTML Purifier におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4183	2012-03-27 18:42	2010-09-5	Show	GitHub Exploit DB Packet Storm

250940	5	警告	Yaws	-	Yaws におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4181	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266621	7.5	HIGH Network	imagely	nextgen_gallery	The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user t…	CWE-20 Improper Input Validation	CVE-2016-6565	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266622	7.5	HIGH Adjacent	mitel	shortel_mobility_client	On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position …	CWE-295 Improper Certificate Validation	CVE-2016-6562	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266623	9.8	CRITICAL Network	synology	ds107_firmware ds213_firmware ds116_firmware	Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A re…	CWE-255 Credentials Management	CVE-2016-6554	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266624	9.8	CRITICAL Network	nuuo	nt-4040_titan_firmware	Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulne…	CWE-255 Credentials Management	CVE-2016-6553	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266625	9.8	CRITICAL Network	greenpacket	dx-350_firmware	Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device.	CWE-255 Credentials Management	CVE-2016-6552	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266626	9.8	CRITICAL Network	intelliantech	v60_firmware v60ka_firmware v65_firmware v80g_firmware t80w_firmware t80q_firmware t100w_firmware t100q_firmware t110w_firmware t110q_firmware t130w_firmware t130q_fi…	Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access…	CWE-255 Credentials Management	CVE-2016-6551	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266627	4.3	MEDIUM Adjacent	nutspace	nut_mobile	The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute.	CWE-287 Improper Authentication	CVE-2016-6549	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266628	9.8	CRITICAL Network	nutspace	nut_mobile	The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse th…	CWE-200 Information Exposure	CVE-2016-6548	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266629	7.8	HIGH Local	nutspace	nut_mobile	The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6547	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266630	7.8	HIGH Local	kkmcn	itrackeasy	The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cl…	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6546	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed