Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238581 4.3 警告 arcadwy - Arcadwy Arcade Script CMS の register.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1228 2012-06-26 16:10 2009-04-2 Show GitHub Exploit DB Packet Storm
238582 5 警告 fullrevolution - aspWebCalendar Free Edition におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1223 2012-06-26 16:10 2009-04-2 Show GitHub Exploit DB Packet Storm
238583 7.5 危険 auth2db - auth2db における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1208 2012-06-26 16:10 2009-04-1 Show GitHub Exploit DB Packet Storm
238584 4.3 警告 banshee-project - Banshee の DAAP 拡張の apps/web/vs_diag.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1175 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
238585 10 危険 DELL EMC (旧 EMC Corporation) - EMC RepliStor におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1119 2012-06-26 16:10 2009-04-15 Show GitHub Exploit DB Packet Storm
238586 9.3 危険 GeoVision - GeoVision DVR システムの LIVEAU~1.OCX における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1092 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
238587 4.3 警告 expressionengine - ExpressionEngine の system/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1070 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
238588 9.3 危険 AB Team - bsplayer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1068 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
238589 4.3 警告 Lucid Crew - Pixie CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1067 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
238590 7.5 危険 Lucid Crew - Pixie CMS の admin/lib/lib_logs.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1066 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 27, 2026, 1:20 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256241 9.8 CRITICAL
Network 		libvncserver_project libvncserver Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a cra… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9942 2024-11-21 12:02 2017-01-1 Show GitHub Exploit DB Packet Storm
256242 9.8 CRITICAL
Network 		libvncserver_project libvncserver Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9941 2024-11-21 12:02 2017-01-1 Show GitHub Exploit DB Packet Storm
256243 6.5 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leverag… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2016-9916 2024-11-21 12:02 2016-12-30 Show GitHub Exploit DB Packet Storm
256244 6.5 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		Memory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by levera… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2016-9915 2024-11-21 12:02 2016-12-30 Show GitHub Exploit DB Packet Storm
256245 6.5 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a … CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2016-9914 2024-11-21 12:02 2016-12-30 Show GitHub Exploit DB Packet Storm
256246 6.5 MEDIUM
Local 		qemu qemu Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and … CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2016-9913 2024-11-21 12:02 2016-12-30 Show GitHub Exploit DB Packet Storm
256247 5.5 MEDIUM
Local 		qemu qemu Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in the guest. A guest user/process could… CWE-416
 Use After Free 		CVE-2016-9923 2024-11-21 12:02 2016-12-24 Show GitHub Exploit DB Packet Storm
256248 6.5 MEDIUM
Local 		qemu
debian
redhat 		qemu
debian_linux
openstack
virtualization 		Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. … CWE-369
 Divide By Zero 		CVE-2016-9921 2024-11-21 12:02 2016-12-24 Show GitHub Exploit DB Packet Storm
256249 6.1 MEDIUM
Network 		spip spip SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin.php involving the `$plugin` parameter, as demonstrated by a /ecrire/?exec=info_plugin URL. CWE-79
Cross-site Scripting 		CVE-2016-9998 2024-11-21 12:02 2016-12-17 Show GitHub Exploit DB Packet Storm
256250 6.1 MEDIUM
Network 		spip spip SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/puce_statut.php involving the `$id` parameter, as demonstrated by a /ecrire/?exec=puce_statut URL. CWE-79
Cross-site Scripting 		CVE-2016-9997 2024-11-21 12:02 2016-12-17 Show GitHub Exploit DB Packet Storm