Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257161	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1880	2010-06-30 18:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

257162	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1879	2010-06-30 18:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

257163	8.5	危険	PostgreSQL.org サイバートラスト株式会社レッドハット	-	PostgreSQL における任意の Perl コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1447	2010-06-30 18:17	2010-05-14	Show	GitHub Exploit DB Packet Storm

257164	9.3	危険	アップル	-	Apple Mac OS の ColorSync における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-1726	2010-06-30 18:17	2009-08-5	Show	GitHub Exploit DB Packet Storm

257165	6.9	警告	アップルサイバートラスト株式会社 The Perl Foundation レッドハット	-	Perl の rmtree 関数における任意のファイルを削除される脆弱性	CWE-362 競合状態	CVE-2008-5303	2010-06-30 18:16	2008-12-1	Show	GitHub Exploit DB Packet Storm

257166	6.9	警告	アップルサイバートラスト株式会社 The Perl Foundation レッドハット	-	Perl の rmtree 関数における任意の setuid バイナリを作成される脆弱性	CWE-362 競合状態	CVE-2008-5302	2010-06-30 18:16	2008-12-1	Show	GitHub Exploit DB Packet Storm

257167	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1419	2010-06-29 16:59	2010-06-10	Show	GitHub Exploit DB Packet Storm

257168	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1412	2010-06-25 18:51	2010-06-10	Show	GitHub Exploit DB Packet Storm

257169	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1749	2010-06-24 15:38	2010-06-10	Show	GitHub Exploit DB Packet Storm

257170	7.8	危険	日立	-	JP1/ServerConductor/Deployment Manager における不正にシャットダウンまたはリブートを実行する脆弱性	CWE-noinfo 情報不足	-	2010-06-22 17:28	2010-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268091	7.5	HIGH Network	mediawiki	mediawiki	MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights.	CWE-284 Improper Access Control	CVE-2016-6337	2024-11-21 11:55	2017-04-21	Show	GitHub Exploit DB Packet Storm

268092	6.5	MEDIUM Network	mediawiki	mediawiki	MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restriction…	CWE-284 Improper Access Control	CVE-2016-6336	2024-11-21 11:55	2017-04-21	Show	GitHub Exploit DB Packet Storm

268093	7.5	HIGH Network	mediawiki	mediawiki	MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head items in the context of a given title, which allows remote attackers to obtain sensitive information vi…	CWE-200 Information Exposure	CVE-2016-6335	2024-11-21 11:55	2017-04-21	Show	GitHub Exploit DB Packet Storm

268094	6.1	MEDIUM Network	mediawiki	mediawiki	Cross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbi…	CWE-79 Cross-site Scripting	CVE-2016-6334	2024-11-21 11:55	2017-04-21	Show	GitHub Exploit DB Packet Storm

268095	6.1	MEDIUM Network	mediawiki	mediawiki	Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrar…	CWE-79 Cross-site Scripting	CVE-2016-6333	2024-11-21 11:55	2017-04-21	Show	GitHub Exploit DB Packet Storm

268096	7.5	HIGH Network	mediawiki	mediawiki	MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers to obtain sensitive information by leveraging failure to ter…	CWE-200 Information Exposure	CVE-2016-6332	2024-11-21 11:55	2017-04-21	Show	GitHub Exploit DB Packet Storm

268097	7.5	HIGH Network	mediawiki	mediawiki	ApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to bypass intended per-title read restrictions via a parse action to api.php.	CWE-284 Improper Access Control	CVE-2016-6331	2024-11-21 11:55	2017-04-21	Show	GitHub Exploit DB Packet Storm

268098	7.8	HIGH Local	fedoraproject mock_project	fedora scm_plugin	The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-6299	2024-11-21 11:55	2017-04-15	Show	GitHub Exploit DB Packet Storm

268099	9.8	CRITICAL Network	sap	hana	SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.	CWE-284 Improper Access Control	CVE-2016-6143	2024-11-21 11:55	2017-04-13	Show	GitHub Exploit DB Packet Storm

268100	6.1	MEDIUM Network	redhat	resteasy	JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.	CWE-79 Cross-site Scripting	CVE-2016-6348	2024-11-21 11:55	2017-04-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed