Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241001 4.3 警告 ATutor - ATRC ACollab におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4944 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
241002 4.3 警告 ATutor - ACollab におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4942 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
241003 4.3 警告 ATutor - ATRC ACollab の sign_in.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4941 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
241004 7.5 危険 esoftpro - Online Guestbook Pro の ogp_show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4935 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241005 4.3 警告 esoftpro - Online Photo Pro の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4934 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241006 6.8 警告 bestwebsharing - Groovy Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4931 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241007 4.3 警告 esoftpro - Online Contact Manager および EContact PRO におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4926 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241008 6.8 警告 creasito - Portale e-commerce Creasito における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4925 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241009 4.3 警告 dan pascu - Dan Pascu python-cjson における特定のクロスサイトスクリプティング攻撃を誘発する脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4924 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
241010 6.8 警告 dootzky - oBlog の admin/index.php における総当りパスワード推測攻撃を実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-4909 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267311 5.9 MEDIUM
Network 		radware alteon Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-02… CWE-200
Information Exposure 		CVE-2016-10212 2024-11-21 11:43 2017-02-9 Show GitHub Exploit DB Packet Storm
267312 7.8 HIGH
Local 		linux
google 		linux_kernel
android 		The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10044 2024-11-21 11:43 2017-02-7 Show GitHub Exploit DB Packet Storm
267313 4.3 MEDIUM
Physics 		linux linux_kernel The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of servic… CWE-125
Out-of-bounds Read 		CVE-2016-10208 2024-11-21 11:43 2017-02-6 Show GitHub Exploit DB Packet Storm
267314 5.5 MEDIUM
Local 		linux linux_kernel The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (sys… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10154 2024-11-21 11:43 2017-02-6 Show GitHub Exploit DB Packet Storm
267315 7.8 HIGH
Local 		linux linux_kernel The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memor… CWE-399
 Resource Management Errors 		CVE-2016-10153 2024-11-21 11:43 2017-02-6 Show GitHub Exploit DB Packet Storm
267316 9.8 CRITICAL
Network 		linux linux_kernel Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service (host OS crash) or poss… CWE-264
CWE-416
Permissions, Privileges, and Access Controls
 Use After Free 		CVE-2016-10150 2024-11-21 11:43 2017-02-6 Show GitHub Exploit DB Packet Storm
267317 9.8 CRITICAL
Network 		sendquick entera_sms_gateway_firmware
avera_sms_gateway_firmware 		An issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Command Injection vulnerabilities allow attackers to execute arbitrary system commands. CWE-77
Command Injection 		CVE-2016-10098 2024-11-21 11:43 2017-02-6 Show GitHub Exploit DB Packet Storm
267318 7.1 HIGH
Local 		littlecms
debian
canonical
opensuse
redhat
netapp 		little_cms_color_engine
debian_linux
ubuntu_linux
leap
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_lin… 		The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which … CWE-125
Out-of-bounds Read 		CVE-2016-10165 2024-11-21 11:43 2017-02-4 Show GitHub Exploit DB Packet Storm
267319 7.5 HIGH
Network 		sap saplpd SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a Denial of Service vulnerability (service crash) with a long string to TCP port 515. CWE-20
 Improper Input Validation  		CVE-2016-10079 2024-11-21 11:43 2017-02-2 Show GitHub Exploit DB Packet Storm
267320 7.5 HIGH
Network 		minitar archive-tar-minitar
minitar 		Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry. CWE-22
Path Traversal 		CVE-2016-10173 2024-11-21 11:43 2017-02-2 Show GitHub Exploit DB Packet Storm