Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252141	7.5	危険	WebManager Pro	-	CMS WebManager-Pro の c.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4899	2012-01-19 11:42	2011-10-8	Show	GitHub Exploit DB Packet Storm

252142	7.5	危険	Gantry framework	-	Joomla! 用 Gantry における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4898	2012-01-19 11:41	2011-10-8	Show	GitHub Exploit DB Packet Storm

252143	7.5	危険	BlueCms	-	BlueCMS の comment.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4897	2012-01-19 11:41	2011-10-8	Show	GitHub Exploit DB Packet Storm

252144	4.3	警告	Expinion.net	-	Member Management System の admin/index.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4896	2012-01-19 11:39	2011-10-8	Show	GitHub Exploit DB Packet Storm

252145	4.3	警告	chillyCMS	-	chillyCMS の core/showsite.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4895	2012-01-19 11:38	2011-10-8	Show	GitHub Exploit DB Packet Storm

252146	7.5	危険	chillyCMS	-	chillyCMS の core/showsite.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4894	2012-01-19 11:37	2011-10-8	Show	GitHub Exploit DB Packet Storm

252147	4.3	警告	Skypanther Studios	-	FestOS の foodvendors.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4893	2012-01-19 11:23	2011-10-8	Show	GitHub Exploit DB Packet Storm

252148	4.3	警告	Alex Kellner	-	TYPO3 用の powermail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4892	2012-01-19 11:20	2010-10-26	Show	GitHub Exploit DB Packet Storm

252149	7.5	危険	Andreas Kiefer	-	TYPO3 用の Yet Another Calendar における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4891	2012-01-19 11:20	2010-09-2	Show	GitHub Exploit DB Packet Storm

252150	4.3	警告	Andreas Kiefer	-	TYPO3 用の Yet Another Calendar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4890	2012-01-19 11:19	2010-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265211	5.5	MEDIUM Local	libav	libav	Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service (crash) via vectors related to buffer resizing.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-6832	2024-11-21 11:56	2017-02-16	Show	GitHub Exploit DB Packet Storm

265212	9.8	CRITICAL Network	netapp	oncommand_unified_manager_for_clustered_data_ontap	NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-6667	2024-11-21 11:56	2017-02-8	Show	GitHub Exploit DB Packet Storm

265213	5.9	MEDIUM Network	netapp	data_ontap	NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access.	CWE-200 Information Exposure	CVE-2016-6495	2024-11-21 11:56	2017-02-8	Show	GitHub Exploit DB Packet Storm

265214	8.1	HIGH Network	forgerock	racf_connector	Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote …	CWE-20 Improper Input Validation	CVE-2016-6500	2024-11-21 11:56	2017-02-4	Show	GitHub Exploit DB Packet Storm

265215	6.7	MEDIUM Local	emc	recoverpoint_for_virtual_machines recoverpoint	EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with …	CWE-77 Command Injection	CVE-2016-6649	2024-11-21 11:56	2017-02-3	Show	GitHub Exploit DB Packet Storm

265216	4.4	MEDIUM Local	emc	recoverpoint_for_virtual_machines recoverpoint	EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissi…	CWE-275 Permission Issues	CVE-2016-6648	2024-11-21 11:56	2017-02-3	Show	GitHub Exploit DB Packet Storm

265217	8.6	HIGH Network	phpmyadmin	phpmyadmin	The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2016-6621	2024-11-21 11:56	2017-02-1	Show	GitHub Exploit DB Packet Storm

265218	9.8	CRITICAL Network	samsung	exynos_fimg2d	NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382.	CWE-476 NULL Pointer Dereference	CVE-2016-6604	2024-11-21 11:56	2017-01-31	Show	GitHub Exploit DB Packet Storm

265219	7.5	HIGH Network	atlassian	confluence_server jira_integration_for_hipchat	The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA …	CWE-200 Information Exposure	CVE-2016-6668	2024-11-21 11:56	2017-01-24	Show	GitHub Exploit DB Packet Storm

265220	9.8	CRITICAL Network	zohocorp	webnms_framework	ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.	CWE-20 Improper Input Validation	CVE-2016-6603	2024-11-21 11:56	2017-01-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed