Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251201	4.3	警告	IBM	-	IBM LMC の HTTP-AS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4590	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

251202	4.3	警告	IBM	-	IBM ENOVIA 6 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4589	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

251203	10	危険	IBM	-	IBM Rational ClearQuest における .ocx ファイルに関する処理に不備がある脆弱性	CWE-noinfo 情報不足	CVE-2010-4601	2012-03-27 18:42	2009-11-2	Show	GitHub Exploit DB Packet Storm

251204	4.3	警告	Mozilla Foundation	-	Bugzilla の chart.cgi における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4572	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251205	4.3	警告	Mozilla Foundation	-	Bugzilla の duplicate-detection 機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4570	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251206	4.3	警告	Mozilla Foundation	-	Bugzilla におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4569	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251207	7.5	危険	Mozilla Foundation	-	Bugzilla における任意のアカウントにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4568	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251208	4.3	警告	Mozilla Foundation	-	Bugzilla におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4567	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251209	4.3	警告	SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4555	2012-03-27 18:42	2011-07-11	Show	GitHub Exploit DB Packet Storm

251210	4.3	警告	SquirrelMail Project	-	SquirrelMail の functions/page_header.php におけるクリックジャック攻撃を誘発する脆弱性	CWE-20 不適切な入力確認	CVE-2010-4554	2012-03-27 18:42	2011-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265681	4.3	MEDIUM Network	owncloud nextcloud	owncloud nextcloud_server	Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on…	CWE-284 Improper Access Control	CVE-2016-9461	2024-11-21 12:01	2017-03-28	Show	GitHub Exploit DB Packet Storm

265682	5.3	MEDIUM Network	nextcloud owncloud	nextcloud owncloud	Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app. The location bar in the files app was not verifying the passed parameters. …	CWE-284 Improper Access Control	CVE-2016-9460	2024-11-21 12:01	2017-03-28	Show	GitHub Exploit DB Packet Storm

265683	6.1	MEDIUM Network	owncloud nextcloud	owncloud nextcloud_server	Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is…	CWE-79 Cross-site Scripting	CVE-2016-9459	2024-11-21 12:01	2017-03-28	Show	GitHub Exploit DB Packet Storm

265684	5.4	MEDIUM Network	revive-adserver	revive_adserver	Revive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed…	CWE-79 Cross-site Scripting	CVE-2016-9457	2024-11-21 12:01	2017-03-28	Show	GitHub Exploit DB Packet Storm

265685	8.8	HIGH Network	revive-adserver	revive_adserver	Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver team conducted a security audit of the admin interface scripts in order to identify and fix other pote…	CWE-352 Origin Validation Error	CVE-2016-9456	2024-11-21 12:01	2017-03-28	Show	GitHub Exploit DB Packet Storm

265686	8.8	HIGH Network	revive-adserver	revive_adserver	Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). A number of scripts in Revive Adserver's user interface are vulnerable to CSRF attacks: `www/admin/banner-acl.php`, `www/a…	CWE-352 Origin Validation Error	CVE-2016-9455	2024-11-21 12:01	2017-03-28	Show	GitHub Exploit DB Packet Storm

265687	5.4	MEDIUM Network	revive-adserver	revive_adserver	Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive Adserver user interface exists, requiring a trusted (non-admin) account. The banner image …	CWE-79 Cross-site Scripting	CVE-2016-9454	2024-11-21 12:01	2017-03-28	Show	GitHub Exploit DB Packet Storm

265688	5.4	MEDIUM Network	ibm	tririga_application_platform	IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia…	CWE-79 Cross-site Scripting	CVE-2016-9737	2024-11-21 12:01	2017-03-28	Show	GitHub Exploit DB Packet Storm

265689	5.5	MEDIUM Local	jasper_project	jasper	Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file.	CWE-190 Integer Overflow or Wraparound	CVE-2016-9557	2024-11-21 12:01	2017-03-24	Show	GitHub Exploit DB Packet Storm

265690	5.5	MEDIUM Local	imagemagick opensuse_project debian	imagemagick leap debian_linux	The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-9556	2024-11-21 12:01	2017-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed