Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252931 7.5 危険 FamilyCMS - Family Connections Who is Chatting における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-4988 2011-12-9 14:33 2011-11-1 Show GitHub Exploit DB Packet Storm
252932 7.5 危険 Farsi CMS - Ziggurat Farsi CMS の main.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4989 2011-12-9 14:28 2011-11-1 Show GitHub Exploit DB Packet Storm
252933 7.5 危険 B-Elektro - Joomla! 用 Front-edit Address Book コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4990 2011-12-9 14:28 2011-11-1 Show GitHub Exploit DB Packet Storm
252934 7.5 危険 Ninja Forge - Joomla! 用 NinjaMonials コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4991 2011-12-9 14:27 2011-11-1 Show GitHub Exploit DB Packet Storm
252935 7.5 危険 Payments Plus - Joomla! 用 Payments Plus コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4992 2011-12-9 14:26 2011-11-1 Show GitHub Exploit DB Packet Storm
252936 7.5 危険 Kay Messerschmidt - Joomla! 用 eventcal コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4993 2011-12-9 14:26 2011-11-1 Show GitHub Exploit DB Packet Storm
252937 7.5 危険 Instant Php - Joomla! 用 Jobs Pro コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4994 2011-12-9 14:25 2011-11-1 Show GitHub Exploit DB Packet Storm
252938 7.5 危険 NeoJoomla - Joomla! 用 NeoRecruit コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4995 2011-12-9 14:23 2011-11-1 Show GitHub Exploit DB Packet Storm
252939 7.5 危険 esoftpro - esoftpro Online Guestbook Pro の ogp_show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4996 2011-12-9 14:22 2011-11-1 Show GitHub Exploit DB Packet Storm
252940 7.5 危険 esoftpro - esoftpro Online Photo Pro の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4999 2011-12-9 14:21 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264581 5.5 MEDIUM
Local
ibm license_metric_tool
bigfix_inventory
IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system. CWE-200
Information Exposure
CVE-2016-8981 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
264582 8.1 HIGH
Network
ibm license_metric_tool
bigfix_inventory
IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to ex… CWE-611
XXE
CVE-2016-8980 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
264583 5.9 MEDIUM
Network
ibm license_metric_tool
bigfix_inventory
IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerab… CWE-200
Information Exposure
CVE-2016-8966 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
264584 6.1 MEDIUM
Network
ibm license_metric_tool
bigfix_inventory
IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could… CWE-601
Open Redirect
CVE-2016-8961 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
264585 5.4 MEDIUM
Network
ibm spectrum_control
tivoli_storage_productivity_center
IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality… CWE-79
Cross-site Scripting
CVE-2016-8943 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
264586 3.1 LOW
Network
ibm spectrum_control
tivoli_storage_productivity_center
IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server. CWE-284
Improper Access Control
CVE-2016-8942 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
264587 8.8 HIGH
Network
ibm spectrum_control
tivoli_storage_productivity_center
IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website… CWE-352
 Origin Validation Error
CVE-2016-8941 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
264588 6.1 MEDIUM
Network
ibm social_rendering_templates_for_digital_data_connector IBM Social Rendering Templates for Digital Data Connector is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the int… CWE-79
Cross-site Scripting
CVE-2016-8936 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
264589 5.4 MEDIUM
Network
ibm websphere_application_server IBM WebSphere Application Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten… CWE-79
Cross-site Scripting
CVE-2016-8934 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
264590 6.1 MEDIUM
Network
ibm web_content_manager_production_analytics
websphere_portal
Exphox WebRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to… CWE-79
Cross-site Scripting
CVE-2016-8922 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm