Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206451 7.1 重要
Local
Debian
Spice Project
レッドハット
- SPICE における任意のホストメモリ領域から読み書きされる脆弱性 CWE-Other
その他
CVE-2016-2150 2016-06-14 16:01 2016-06-6 Show GitHub Exploit DB Packet Storm
206452 9.8 緊急
Network
Debian
Spice Project
レッドハット
- SPICE のスマートカードのインタラクションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-0749 2016-06-14 16:01 2016-06-6 Show GitHub Exploit DB Packet Storm
206453 6.1 警告
Network
VMware - Windows 上で稼動する VMware vCenter Server の Web Client におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2078 2016-06-14 14:18 2016-05-24 Show GitHub Exploit DB Packet Storm
206454 8.8 重要
Network
KMC Controls - KMC Controls BAC-5051E デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-4494 2016-06-14 14:12 2016-06-7 Show GitHub Exploit DB Packet Storm
206455 7.5 重要
Network
ClamAV
シスコシステムズ
- Cisco E メール セキュリティ アプライアンスおよび Web セキュリティ アプライアンスデバイスで使用される ClamAV におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1405 2016-06-14 14:05 2016-05-31 Show GitHub Exploit DB Packet Storm
206456 7.5 重要
Network
シスコシステムズ - Cisco IP Phone 8800 デバイスの Web アプリケーションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1421 2016-06-14 13:55 2016-06-9 Show GitHub Exploit DB Packet Storm
206457 7.8 重要
Local
シスコシステムズ - Cisco Application Policy Infrastructure Controller デバイスのソフトウェアにおける root アクセス権を取得される脆弱性 CWE-noinfo
情報不足
CVE-2016-1420 2016-06-14 13:55 2016-06-9 Show GitHub Exploit DB Packet Storm
206458 9.8 緊急
Network
GNU Project
openSUSE project
- GNU C Library の sunrpc/clnt_udp.c の clntudp_call 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認
CVE-2016-4429 2016-06-14 12:23 2016-05-23 Show GitHub Exploit DB Packet Storm
206459 7.5 重要
Network
GNU Project
openSUSE project
- GNU C Library の sysdeps/posix/getaddrinfo.c の getaddrinfo 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認
CVE-2016-3706 2016-06-14 12:23 2016-04-29 Show GitHub Exploit DB Packet Storm
206460 9.8 緊急
Network
DELL EMC (旧 EMC Corporation) - EMC NetWorker における任意のコマンドを実行される脆弱性 CWE-287
不適切な認証
CVE-2016-0916 2016-06-14 12:04 2016-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346991 - sbuilder cms_s.builder PHP remote file inclusion vulnerability in index.php in CMS S.Builder 3.7 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in a binn_incl… CWE-94
Code Injection
CVE-2009-4887 2017-09-19 10:30 2010-06-11 Show GitHub Exploit DB Packet Storm
346992 - basti2web book_panel SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter. CWE-89
SQL Injection
CVE-2009-4889 2017-09-19 10:30 2010-06-11 Show GitHub Exploit DB Packet Storm
346993 - cs-cart cs-cart SQL injection vulnerability in index.php in CS-Cart 2.0.0 Beta 3 allows remote attackers to execute arbitrary SQL commands via the product_id parameter in a products.view action. CWE-89
SQL Injection
CVE-2009-4891 2017-09-19 10:30 2010-06-11 Show GitHub Exploit DB Packet Storm
346994 - webjump webjump\! SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) portfolio_genre.php and (2) news_id.php. CWE-89
SQL Injection
CVE-2009-4892 2017-09-19 10:30 2010-06-11 Show GitHub Exploit DB Packet Storm
346995 - vmware esx_server
virtualcenter
Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors rel… CWE-79
Cross-site Scripting
CVE-2009-2277 2017-09-19 10:29 2010-04-2 Show GitHub Exploit DB Packet Storm
346996 - firebirdsql firebird src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon cras… CWE-20
 Improper Input Validation 
CVE-2009-2620 2017-09-19 10:29 2009-07-30 Show GitHub Exploit DB Packet Storm
346997 - openssl openssl OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, wh… CWE-20
 Improper Input Validation 
CVE-2009-3245 2017-09-19 10:29 2010-03-6 Show GitHub Exploit DB Packet Storm
346998 - mozilla seamonkey The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information vi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-3385 2017-09-19 10:29 2010-03-23 Show GitHub Exploit DB Packet Storm
346999 - mozilla firefox
seamonkey
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers t… CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-3988 2017-09-19 10:29 2010-02-22 Show GitHub Exploit DB Packet Storm
347000 - hp enterprise_cluster_master_toolkit Unspecified vulnerability in HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and HP-UX B.11.31 (11i v3) allows local users to gain access to an Oracle or Sybase database… NVD-CWE-noinfo
CVE-2009-4184 2017-09-19 10:29 2010-02-4 Show GitHub Exploit DB Packet Storm