Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206231 7.5 重要
Network
Huawei - Huawei Honor WS851 ルータのソフトウェアにおける設定データを変更される脆弱性 CWE-Other
その他
CVE-2016-5366 2016-06-16 15:09 2016-06-7 Show GitHub Exploit DB Packet Storm
206232 9.8 緊急
Network
Huawei - Huawei Honor WS851 ルータのソフトウェアにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5365 2016-06-16 15:09 2016-06-7 Show GitHub Exploit DB Packet Storm
206233 8.1 重要
Network
Huawei - Huawei VP9600シリーズおよび RSE6500 ビデオ会議デバイスのソフトウェアにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5234 2016-06-16 15:09 2016-06-1 Show GitHub Exploit DB Packet Storm
206234 3.7
Network
Huawei - Huawei Mate 8 スマートフォンのソフトウェアにおける加入者の信号強度の情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-5233 2016-06-16 15:09 2016-05-20 Show GitHub Exploit DB Packet Storm
206235 6.5 警告
Network
Huawei - Android 用 Huawei Wear APP における脆弱性 CWE-Other
その他
CVE-2016-3677 2016-06-16 15:09 2016-04-19 Show GitHub Exploit DB Packet Storm
206236 7.8 重要
Local
Linux - MSM デバイスなどの製品用 QuIC Android コントリビューションで使用される Linux Kernel の MSM QDSP6 オーディオドライバにおける整数符号エラーの脆弱性 CWE-119
CWE-264
CVE-2016-2066 2016-06-16 14:06 2016-06-6 Show GitHub Exploit DB Packet Storm
206237 7.8 重要
Local
Linux - MSM デバイスなどの製品用 QuIC Android コントリビューションで使用される Linux Kernel の MSM V4L2 ビデオドライバにおける整数符号エラーの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2061 2016-06-16 14:06 2016-06-6 Show GitHub Exploit DB Packet Storm
206238 7.5 重要
Network
Libksba project
Canonical
- Libksba におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4579 2016-06-16 12:29 2016-05-17 Show GitHub Exploit DB Packet Storm
206239 7.5 重要
Network
Libksba project
Canonical
- Libksba の DN デコーダの append_utf8_value 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2016-4574 2016-06-16 12:29 2016-05-17 Show GitHub Exploit DB Packet Storm
206240 7.5 重要
Network
Libksba project
Canonical
- Libksba の DN デコーダの append_utf8_value 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-4356 2016-06-16 12:29 2016-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347091 - frederico_caldeira_knabben fckeditor.java FCKeditor.Java 2.4 allows remote attackers to cause a denial of service (infinite loop) via a malformed request parameter that contains "ctrl" characters. CWE-399
 Resource Management Errors
CVE-2009-4875 2017-08-17 10:31 2010-05-27 Show GitHub Exploit DB Packet Storm
347092 - plainblack webgui Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors. CWE-352
 Origin Validation Error
CVE-2009-4877 2017-08-17 10:31 2010-05-27 Show GitHub Exploit DB Packet Storm
347093 - novell access_manager Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors. NVD-CWE-noinfo
CVE-2009-4878 2017-08-17 10:31 2010-05-27 Show GitHub Exploit DB Packet Storm
347094 - nskate phortail Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters. CWE-79
Cross-site Scripting
CVE-2009-4888 2017-08-17 10:31 2010-06-11 Show GitHub Exploit DB Packet Storm
347095 - jbmc-software directadmin CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action. CWE-20
 Improper Input Validation 
CVE-2009-1525 2017-08-17 10:30 2009-05-6 Show GitHub Exploit DB Packet Storm
347096 - jbmc-software directadmin Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request. CWE-79
Cross-site Scripting
CVE-2009-2216 2017-08-17 10:30 2009-06-26 Show GitHub Exploit DB Packet Storm
347097 - ibm websphere_service_registry_and_repository IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended configuration properties, which allows remote authenticated users to obtain unspecified data access vi… CWE-16
Configuration
CVE-2009-2750 2017-08-17 10:30 2010-02-5 Show GitHub Exploit DB Packet Storm
347098 - ibm websphere_commerce IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors. CWE-310
Cryptographic Issues
CVE-2009-2751 2017-08-17 10:30 2010-02-6 Show GitHub Exploit DB Packet Storm
347099 - ibm websphere_commerce IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms. CWE-310
Cryptographic Issues
CVE-2009-2752 2017-08-17 10:30 2010-02-6 Show GitHub Exploit DB Packet Storm
347100 - softbiz dating_script SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4. CWE-89
SQL Injection
CVE-2009-2790 2017-08-17 10:30 2009-08-18 Show GitHub Exploit DB Packet Storm