Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257171 7.5 危険 Emophp Programming - EMO Realty Manager の googlemap/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5006 2011-12-9 14:15 2011-11-2 Show GitHub Exploit DB Packet Storm
257172 4.3 警告 ut-files - UTStats の pages/match_report.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5007 2011-12-9 14:14 2011-11-2 Show GitHub Exploit DB Packet Storm
257173 7.5 危険 Denali - BrightSuite Groupware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5008 2011-12-9 14:13 2011-11-2 Show GitHub Exploit DB Packet Storm
257174 7.5 危険 ut-files - UTStats の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5009 2011-12-9 14:12 2011-11-2 Show GitHub Exploit DB Packet Storm
257175 4.3 警告 FullSite Pty Ltd - SchoolMation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5010 2011-12-9 14:10 2011-11-2 Show GitHub Exploit DB Packet Storm
257176 7.5 危険 FullSite Pty Ltd - SchoolMation における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5011 2011-12-9 14:10 2011-11-2 Show GitHub Exploit DB Packet Storm
257177 7.5 危険 David Noguera Gutierrez - DaLogin における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5012 2011-12-9 14:09 2011-11-2 Show GitHub Exploit DB Packet Storm
257178 7.5 危険 McKenzie Creations - Mckenzie Creations Virtual Real Estate Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5013 2011-12-9 14:04 2011-11-2 Show GitHub Exploit DB Packet Storm
257179 7.5 危険 ELITE　LADDAERS - Elite Gaming Ladders における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5014 2011-12-9 14:03 2011-11-2 Show GitHub Exploit DB Packet Storm
257180 7.5 危険 2daybiz - 2daybiz Network Community Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5015 2011-12-9 14:00 2011-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274731 10.0 CRITICAL
Network 		ivanti
pulsesecure 		connect_secure
pulse_connect_secure 		Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified direct… NVD-CWE-noinfo
CVE-2016-4787 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
274732 7.5 HIGH
Network 		pulsesecure
ivanti 		pulse_connect_secure
connect_secure 		Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. NVD-CWE-noinfo
CVE-2016-4786 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
274733 6.1 MEDIUM
Network 		huawei ath_firmware
ath
rio_firmware
plk_firmware
cherryplus_firmware
cherryplus 		Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 befo… CWE-79
Cross-site Scripting 		CVE-2016-4575 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
274734 6.1 MEDIUM
Network 		lenovo shareit Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universa… CWE-79
Cross-site Scripting 		CVE-2016-4783 2024-11-21 11:52 2016-05-24 Show GitHub Exploit DB Packet Storm
274735 8.8 HIGH
Network 		lenovo shareit Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack." CWE-20
 Improper Input Validation  		CVE-2016-4782 2024-11-21 11:52 2016-05-24 Show GitHub Exploit DB Packet Storm
274736 7.5 HIGH
Adjacent 		huawei usg9500_firmware
ngfw_module_firmware
secospace_usg6300_firmware
secospace_usg6600_firmware
secospace_usg6500_firmware 		Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4577 2024-11-21 11:52 2016-05-24 Show GitHub Exploit DB Packet Storm
274737 9.8 CRITICAL
Network 		huawei nip6300_firmware
secospace_usg6500_firmware
secospace_antiddos8000_firmware
usg9500_firmware
secospace_usg6300_firmware
ngfw_module_firmware
secospace_usg6600_firmware
nip6600_fi… 		Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS80… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4576 2024-11-21 11:52 2016-05-24 Show GitHub Exploit DB Packet Storm
274738 7.8 HIGH
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap… NVD-CWE-Other
CVE-2016-4794 2024-11-21 11:52 2016-05-23 Show GitHub Exploit DB Packet Storm
274739 5.5 MEDIUM
Local 		canonical
linux
oracle 		ubuntu_linux
linux_kernel
linux 		fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL … NVD-CWE-Other
CVE-2016-4581 2024-11-21 11:52 2016-05-23 Show GitHub Exploit DB Packet Storm
274740 7.5 HIGH
Network 		linux
canonical 		linux_kernel
ubuntu_linux 		The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive in… CWE-200
Information Exposure 		CVE-2016-4580 2024-11-21 11:52 2016-05-23 Show GitHub Exploit DB Packet Storm