Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257571	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0485	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

257572	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0484	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

257573	4.3	警告	マイクロソフト	-	Microsoft SharePoint Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0817	2010-07-1 16:02	2010-04-29	Show	GitHub Exploit DB Packet Storm

257574	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Data Analyzer ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0252	2010-07-1 16:02	2010-02-9	Show	GitHub Exploit DB Packet Storm

257575	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0255	2010-07-1 16:01	2010-02-3	Show	GitHub Exploit DB Packet Storm

257576	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1262	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257577	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1259	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257578	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1261	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257579	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1260	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257580	4.3	警告	マイクロソフト	-	複数の Microsoft 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1257	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268571	7.2	HIGH Network	trend_micro	deep_discovery_inspector	hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename…	CWE-20 Improper Input Validation	CVE-2016-5840	2024-11-21 11:55	2016-07-1	Show	GitHub Exploit DB Packet Storm

268572	7.5	HIGH Network	wordpress	wordpress	WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5839	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268573	7.5	HIGH Network	wordpress	wordpress	WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie.	CWE-255 Credentials Management	CVE-2016-5838	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268574	7.5	HIGH Network	wordpress	wordpress	WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5837	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268575	7.5	HIGH Network	wordpress	wordpress	The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5836	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268576	7.5	HIGH Network	wordpress	wordpress	WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.php and wp-admin/re…	CWE-200 Information Exposure	CVE-2016-5835	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268577	6.1	MEDIUM Network	wordpress	wordpress	Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HT…	CWE-79 Cross-site Scripting	CVE-2016-5834	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268578	6.1	MEDIUM Network	wordpress	wordpress	Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web scri…	CWE-79 Cross-site Scripting	CVE-2016-5833	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268579	7.5	HIGH Network	wordpress	wordpress	The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5832	2024-11-21 11:55	2016-06-29	Show	GitHub Exploit DB Packet Storm

268580	7.8	HIGH Local	debian linux novell canonical	debian_linux linux_kernel suse_linux_enterprise_real_time_extension ubuntu_linux	Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly hav…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-5829	2024-11-21 11:55	2016-06-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed