Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252501	7.5	危険	Jextensions	-	Joomla! 用 JE Guestbook (com_jeguestbook) コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4865	2012-02-9 11:08	2011-10-5	Show	GitHub Exploit DB Packet Storm

252502	7.5	危険	Daniel James Scott	-	Joomla! 用 Club Manager (com_clubmanager) コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4864	2012-02-9 11:08	2011-10-5	Show	GitHub Exploit DB Packet Storm

252503	4.3	警告	The GetSimple Team	-	GetSimple CMS の admin/changedata.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4863	2012-02-9 11:07	2011-10-5	Show	GitHub Exploit DB Packet Storm

252504	7.5	危険	Joomla! Jextensions	-	Joomla! 用 JExtensions JE Director コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4862	2012-02-9 11:07	2011-10-5	Show	GitHub Exploit DB Packet Storm

252505	7.5	危険	webSPELL	-	webSPELL の asearch.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4861	2012-02-9 11:06	2011-10-5	Show	GitHub Exploit DB Packet Storm

252506	7.5	危険	Galaxyscriptz	-	MyPhpAuction の product_desc.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4860	2012-02-9 11:05	2011-10-5	Show	GitHub Exploit DB Packet Storm

252507	7.5	危険	WebAsyst	-	WebAsyst Shop-Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4859	2012-02-9 11:05	2011-10-5	Show	GitHub Exploit DB Packet Storm

252508	5	警告	Joerg Risse	-	DNET Live-Stats の team.rc5-72.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4858	2012-02-9 11:04	2011-10-5	Show	GitHub Exploit DB Packet Storm

252509	7.5	危険	Curtiss Grymala	-	CAG CMS の click.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4857	2012-02-9 11:03	2011-10-5	Show	GitHub Exploit DB Packet Storm

252510	7.5	危険	ASP indir	-	xWeblog の arsiv.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4856	2012-02-9 11:03	2011-10-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264701	6.5	MEDIUM Network	redhat xmlsoft	jboss_core_services libxml2	libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this …	CWE-400 Uncontrolled Resource Consumption	CVE-2016-9596	2024-11-21 12:01	2018-08-17	Show	GitHub Exploit DB Packet Storm

264702	7.8	HIGH Local	redhat jasper_project oracle	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus jasper outside_i…	An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.	CWE-125 Out-of-bounds Read	CVE-2016-9583	2024-11-21 12:01	2018-08-2	Show	GitHub Exploit DB Packet Storm

264703	8.8	HIGH Network	uclouvain	openjpeg	An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.	-	CVE-2016-9580	2024-11-21 12:01	2018-08-2	Show	GitHub Exploit DB Packet Storm

264704	7.5	HIGH Network	redhat	enterprise_linux_desktop enterprise_linux_workstation ceph_storage_osd ceph_storage_mon enterprise_linux_server ceph_storage	A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw …	-	CVE-2016-9579	2024-11-21 12:01	2018-08-2	Show	GitHub Exploit DB Packet Storm

264705	6.5	MEDIUM Network	uclouvain debian	openjpeg debian_linux	A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openj…	-	CVE-2016-9572	2024-11-21 12:01	2018-08-2	Show	GitHub Exploit DB Packet Storm

264706	8.8	HIGH Network	uclouvain	openjpeg	An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.	-	CVE-2016-9581	2024-11-21 12:01	2018-08-1	Show	GitHub Exploit DB Packet Storm

264707	8.1	HIGH Network	uclouvain redhat debian	openjpeg enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus debian_linux	An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, pote…	-	CVE-2016-9573	2024-11-21 12:01	2018-08-1	Show	GitHub Exploit DB Packet Storm

264708	7.5	HIGH Network	canonical xmlsoft debian hp opensuse	ubuntu_linux libxml2 debian_linux icewall_file_manager icewall_federation_agent leap	It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service att…	-	CVE-2016-9597	2024-11-21 12:01	2018-07-30	Show	GitHub Exploit DB Packet Storm

264709	9.9	CRITICAL Network	qemu redhat citrix debian	qemu enterprise_linux_desktop xenserver enterprise_linux_workstation openstack enterprise_linux_server debian_linux enterprise_linux_server_aus enterprise_linux_server_eus	A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-9603	2024-11-21 12:01	2018-07-28	Show	GitHub Exploit DB Packet Storm

264710	7.5	HIGH Network	spice_project redhat debian	spice enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux enterprise_linux_server_aus enterprise_linux_server_eus	A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to …	CWE-20 Improper Input Validation	CVE-2016-9578	2024-11-21 12:01	2018-07-28	Show	GitHub Exploit DB Packet Storm