Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251021	3.5	注意	MantisBT Group	-	MantisBT におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2802	2012-03-27 18:42	2010-05-23	Show	GitHub Exploit DB Packet Storm

251022	6.8	警告	dest-unreach.org	-	Socat の nestlex 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2799	2012-03-27 18:42	2010-09-14	Show	GitHub Exploit DB Packet Storm

251023	7.5	危険	CMS Made Simple	-	CMS Made Simple の lib/translation.functions.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2797	2012-03-27 18:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

251024	6.8	警告	マイクロソフトレッドハット	-	RHEV Manager の SPICE plug-in for Internet Explorer における競合状態の脆弱性	CWE-362 競合状態	CVE-2010-2793	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

251025	4.3	警告	Novell	-	Novell GroupWise の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2779	2012-03-27 18:42	2010-06-30	Show	GitHub Exploit DB Packet Storm

251026	4.3	警告	Novell	-	Novell GroupWise の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2778	2012-03-27 18:42	2010-06-30	Show	GitHub Exploit DB Packet Storm

251027	9	危険	Novell	-	Novell GroupWise の IMAP サーバコンポーネントにおけるスタックペースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2777	2012-03-27 18:42	2010-06-30	Show	GitHub Exploit DB Packet Storm

251028	6.9	警告	Linux	-	Linux kernel の hvc_close 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-2653	2012-03-27 18:42	2010-10-5	Show	GitHub Exploit DB Packet Storm

251029	5	警告	IBM	-	IBM WSRR における管理統制操作を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2644	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

251030	5	警告	IBM	-	IBM WebSphere Commerce Enterprise における他人のメッセージを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-2639	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269261	7.5	HIGH Network	apache	jetspeed	The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add, (2) edit, or (3) delete users via the RES…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2171	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

269262	7.5	HIGH Network	apache	openmeetings	The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified pro…	CWE-200 Information Exposure	CVE-2016-2164	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

269263	6.1	MEDIUM Network	apache	openmeetings	Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event.	CWE-79 Cross-site Scripting	CVE-2016-2163	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

269264	7.3	HIGH Network	debian rubyonrails	debian_linux ruby_on_rails rails	Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of t…	CWE-20 Improper Input Validation	CVE-2016-2098	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

269265	5.3	MEDIUM Network	rubyonrails	ruby_on_rails rails	Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted u…	CWE-22 Path Traversal	CVE-2016-2097	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

269266	7.5	HIGH Network	nodejs fedoraproject	node.js fedora	Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.	CWE-20 Improper Input Validation	CVE-2016-2086	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

269267	9.8	CRITICAL Network	hp	asset_manager asset_manager_cloudsystem_chargeback	HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache C…	CWE-19 Data Processing Errors	CVE-2016-2000	2024-11-21 11:47	2016-04-6	Show	GitHub Exploit DB Packet Storm

269268	5.5	MEDIUM Local	apple	ibooks_author	Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, relat…	NVD-CWE-Other	CVE-2016-1789	2024-11-21 11:47	2016-04-6	Show	GitHub Exploit DB Packet Storm

269269	6.2	MEDIUM Local	apple	iphone_os	The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app.	CWE-284 Improper Access Control	CVE-2016-1760	2024-11-21 11:47	2016-03-30	Show	GitHub Exploit DB Packet Storm

269270	5.9	MEDIUM Network	apple	watchos iphone_os mac_os_x	Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachmen…	CWE-310 Cryptographic Issues	CVE-2016-1788	2024-11-21 11:47	2016-03-24	Show	GitHub Exploit DB Packet Storm