Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258321	6.2	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo の secure path 機能における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1646	2010-09-8 15:50	2010-06-7	Show	GitHub Exploit DB Packet Storm

258322	6.9	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1163	2010-09-8 15:50	2010-04-16	Show	GitHub Exploit DB Packet Storm

258323	10	危険	ESET アップル ClamAV ソースネクスト	-	複数のアンチウィルス製品に脆弱性	CWE-noinfo 情報不足	CVE-2010-0098	2010-09-8 15:50	2010-04-13	Show	GitHub Exploit DB Packet Storm

258324	7.5	危険	The PHP Group アップル	-	PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1129	2010-09-8 15:49	2010-03-26	Show	GitHub Exploit DB Packet Storm

258325	4.4	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0427	2010-09-8 15:49	2010-02-25	Show	GitHub Exploit DB Packet Storm

258326	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2784	2010-09-7 15:51	2010-08-19	Show	GitHub Exploit DB Packet Storm

258327	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0431	2010-09-7 15:50	2010-08-19	Show	GitHub Exploit DB Packet Storm

258328	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0429	2010-09-7 15:49	2010-08-19	Show	GitHub Exploit DB Packet Storm

258329	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0428	2010-09-7 15:48	2010-08-19	Show	GitHub Exploit DB Packet Storm

258330	-	-	ワイズテクノロジー	-	Wyse ThinOS LPD サービスにバッファオーバーフローの脆弱性	-	-	2010-09-7 15:47	2010-08-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268311	8.1	HIGH Network	moxa	awk-3131a_firmware	An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication reque…	CWE-613 Insufficient Session Expiration	CVE-2016-8712	2024-11-21 11:59	2017-04-14	Show	GitHub Exploit DB Packet Storm

268312	6.1	MEDIUM Network	moxa	awk-3131a_firmware	An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Specially crafted input, in multi…	CWE-79 Cross-site Scripting	CVE-2016-8719	2024-11-21 11:59	2017-04-13	Show	GitHub Exploit DB Packet Storm

268313	8.8	HIGH Network	moxa	awk-3131a_firmware	An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a …	CWE-352 Origin Validation Error	CVE-2016-8718	2024-11-21 11:59	2017-04-13	Show	GitHub Exploit DB Packet Storm

268314	7.5	HIGH Adjacent	moxa	awk-3131a_firmware	An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functiona…	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2016-8716	2024-11-21 11:59	2017-04-13	Show	GitHub Exploit DB Packet Storm

268315	8.1	HIGH Network	lenovo	updates	Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle attackers to execute arbitrary code.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8237	2024-11-21 11:59	2017-04-11	Show	GitHub Exploit DB Packet Storm

268316	7.8	HIGH Local	lenovo	customer_care_software_development_kit	Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8235	2024-11-21 11:59	2017-04-11	Show	GitHub Exploit DB Packet Storm

268317	7.5	HIGH Adjacent	huawei	oceanstor_5600_v3_firmware	Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may …	CWE-798 Use of Hard-coded Credentials	CVE-2016-8754	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm

268318	6.5	MEDIUM Network	huawei	anyoffice	Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb.	CWE-20 Improper Input Validation	CVE-2016-8275	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm

268319	7.8	HIGH Local	huawei	hisuite	Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code.	CWE-284 Improper Access Control	CVE-2016-8274	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm

268320	7.8	HIGH Local	huawei	hisuite	Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can la…	CWE-20 CWE-284 Improper Input Validation Improper Access Control	CVE-2016-8273	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm