Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251481	5	警告	Blue River	-	Mura CMS および Sava CMS の fileManager.cfc におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3468	2012-03-27 18:42	2010-09-29	Show	GitHub Exploit DB Packet Storm

251482	6.8	警告	E-Xoopport	-	E-Xoopport Samsara における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3467	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251483	4.3	警告	NetArt Media	-	NetArt Media iBoutique.MALL の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3466	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251484	4.3	警告	ecommercesoft	-	XSE Shopping Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3465	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251485	6.8	警告	santafox	-	SantaFox の admin/manager_users.class.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3464	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251486	4.3	警告	santafox	-	SantaFox の modules/search/search.class.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3463	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251487	4.3	警告	mollify	-	Mollify の backend/plugin/Registration/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3462	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251488	7.5	危険	endonesia	-	eNdonesia の Publisher モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3461	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251489	5	警告	Gecad Technologies	-	AXIGEN Mail Server の HTTP インターフェースにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3460	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251490	4.3	警告	Gecad Technologies	-	AXIGEN Mail Server の Ajax WebMail インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3459	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258941	7.5	HIGH Network	pooledwebsocket_project	pooledwebsocket	pooledwebsocket is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.	CWE-22 Path Traversal	CVE-2017-16107	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

258942	7.5	HIGH Network	tmock_project	tmock	tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.	CWE-22 Path Traversal	CVE-2017-16106	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

258943	7.5	HIGH Network	serverwzl_project	serverwzl	serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.	CWE-22 Path Traversal	CVE-2017-16105	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

258944	7.5	HIGH Network	citypredict.whauwiller_project	citypredict.whauwiller	citypredict.whauwiller is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.	CWE-22 Path Traversal	CVE-2017-16104	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

258945	7.5	HIGH Network	serveryztyzt_project	serveryztyzt	serveryztyzt is a simple http server. serveryztyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.	CWE-22 Path Traversal	CVE-2017-16103	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

258946	7.5	HIGH Network	serverhuwenhui_project	serverhuwenhui	serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.	CWE-22 Path Traversal	CVE-2017-16102	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

258947	7.5	HIGH Network	serverwg_project	serverwg	serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.	CWE-22 Path Traversal	CVE-2017-16101	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

258948	9.8	CRITICAL Network	dns-sync_project	dns-sync	dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible.	CWE-77 Command Injection	CVE-2017-16100	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

258949	7.5	HIGH Network	no-case_project	no-case	The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.	CWE-400 Uncontrolled Resource Consumption	CVE-2017-16099	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

258950	7.5	HIGH Network	charset_project	charset	charset 1.0.0 and below are vulnerable to regular expression denial of service. Input of around 50k characters is required for a slow down of around 2 seconds. Unless node was compiled using the -DHT…	CWE-400 Uncontrolled Resource Consumption	CVE-2017-16098	2024-11-21 12:15	2018-06-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed