Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251001 4.3 警告 ヒューレット・パッカード - HP Insight Control Performance Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4030 2012-03-27 18:42 2010-10-28 Show GitHub Exploit DB Packet Storm
251002 7.5 危険 ヒューレット・パッカード - HP Storage Essentials における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4029 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
251003 7.5 危険 ヒューレット・パッカード - HP LoadRunner の LoadRunner Web Tours におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-4028 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
251004 5.6 警告 ヒューレット・パッカード - HP Palm webOS のカメラアプリケーションにおける任意のファイルを上書される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4027 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
251005 6.2 警告 ヒューレット・パッカード - HP Palm webOS のサービス API における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4026 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
251006 9.3 危険 ヒューレット・パッカード - HP Palm webOS の Doc Viewer における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4025 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
251007 6.8 警告 ヒューレット・パッカード - HP Insight Control Power Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-4024 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
251008 4.3 警告 ヒューレット・パッカード - HP Insight Control Power Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4023 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
251009 6.2 警告 アップル - Apple の iOS におけるパスワードロックを回避される脆弱性 CWE-362
競合状態 		CVE-2010-4012 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
251010 5 警告 オラクル - Oracle Mojarra における View State を変更される脆弱性 CWE-310
暗号の問題 		CVE-2010-4007 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266261 6.1 MEDIUM
Network 		opera opera_browser Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE7… CWE-601
Open Redirect 		CVE-2016-6908 2024-11-21 11:57 2017-01-27 Show GitHub Exploit DB Packet Storm
266262 6.5 MEDIUM
Network 		wordpress wordpress Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authenticatio… CWE-352
 Origin Validation Error 		CVE-2016-6897 2024-11-21 11:57 2017-01-19 Show GitHub Exploit DB Packet Storm
266263 7.1 HIGH
Network 		wordpress wordpress Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read… CWE-22
Path Traversal 		CVE-2016-6896 2024-11-21 11:57 2017-01-19 Show GitHub Exploit DB Packet Storm
266264 5.4 MEDIUM
Network 		b2evolution b2evolution Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the site name. CWE-79
Cross-site Scripting 		CVE-2016-7150 2024-11-21 11:57 2017-01-19 Show GitHub Exploit DB Packet Storm
266265 6.1 MEDIUM
Network 		b2evolution b2evolution Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink function. CWE-79
Cross-site Scripting 		CVE-2016-7149 2024-11-21 11:57 2017-01-19 Show GitHub Exploit DB Packet Storm
266266 8.1 HIGH
Network 		unrealircd unrealircd The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user vi… CWE-287
Improper Authentication 		CVE-2016-7144 2024-11-21 11:57 2017-01-19 Show GitHub Exploit DB Packet Storm
266267 6.5 MEDIUM
Network 		imagemagick imagemagick The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file. CWE-125
Out-of-bounds Read 		CVE-2016-7101 2024-11-21 11:57 2017-01-19 Show GitHub Exploit DB Packet Storm
266268 5.3 MEDIUM
Network 		ntp ntp NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include t… CWE-682
 Incorrect Calculation 		CVE-2016-7433 2024-11-21 11:57 2017-01-14 Show GitHub Exploit DB Packet Storm
266269 5.3 MEDIUM
Network 		ntp ntp NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression. CWE-20
 Improper Input Validation  		CVE-2016-7431 2024-11-21 11:57 2017-01-14 Show GitHub Exploit DB Packet Storm
266270 3.7 LOW
Network 		ntp ntp NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source)… CWE-18
Source Code 		CVE-2016-7429 2024-11-21 11:57 2017-01-14 Show GitHub Exploit DB Packet Storm