Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241001 4.3 警告 ATutor - ATRC ACollab におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4944 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
241002 4.3 警告 ATutor - ACollab におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4942 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
241003 4.3 警告 ATutor - ATRC ACollab の sign_in.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4941 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
241004 7.5 危険 esoftpro - Online Guestbook Pro の ogp_show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4935 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241005 4.3 警告 esoftpro - Online Photo Pro の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4934 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241006 6.8 警告 bestwebsharing - Groovy Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4931 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241007 4.3 警告 esoftpro - Online Contact Manager および EContact PRO におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4926 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241008 6.8 警告 creasito - Portale e-commerce Creasito における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4925 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
241009 4.3 警告 dan pascu - Dan Pascu python-cjson における特定のクロスサイトスクリプティング攻撃を誘発する脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4924 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
241010 6.8 警告 dootzky - oBlog の admin/index.php における総当りパスワード推測攻撃を実行される脆弱性 CWE-287
不適切な認証
CVE-2009-4909 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267341 8.2 HIGH
Local
dell emc_data_domain_os EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-0911 2024-11-21 11:42 2016-06-20 Show GitHub Exploit DB Packet Storm
267342 9.8 CRITICAL
Network
emc networker EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetW… CWE-287
Improper Authentication
CVE-2016-0916 2024-11-21 11:42 2016-06-10 Show GitHub Exploit DB Packet Storm
267343 8.8 HIGH
Local
emc data_domain_os EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary acco… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-0910 2024-11-21 11:42 2016-06-10 Show GitHub Exploit DB Packet Storm
267344 9.8 CRITICAL
Network
opensuse
debian
redhat
spice_project
leap
opensuse
debian_linux
enterprise_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_hpc_node_eus
enterprise_linux_server…
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, wh… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-0749 2024-11-21 11:42 2016-06-10 Show GitHub Exploit DB Packet Storm
267345 6.7 MEDIUM
Local
emc isilon_onefs EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-0908 2024-11-21 11:42 2016-06-4 Show GitHub Exploit DB Packet Storm
267346 7.5 HIGH
Network
moxa edr-g903_firmware Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive informati… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2016-0879 2024-11-21 11:42 2016-05-31 Show GitHub Exploit DB Packet Storm
267347 7.5 HIGH
Network
moxa edr-g903_firmware Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests. NVD-CWE-noinfo
CVE-2016-0878 2024-11-21 11:42 2016-05-31 Show GitHub Exploit DB Packet Storm
267348 7.5 HIGH
Network
moxa edr-g903_firmware Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) by executing the ping function. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2016-0877 2024-11-21 11:42 2016-05-31 Show GitHub Exploit DB Packet Storm
267349 7.5 HIGH
Network
moxa edr-g903_firmware Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file. CWE-312
 Cleartext Storage of Sensitive Information
CVE-2016-0876 2024-11-21 11:42 2016-05-31 Show GitHub Exploit DB Packet Storm
267350 7.5 HIGH
Network
moxa edr-g903_firmware Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2016-0875 2024-11-21 11:42 2016-05-31 Show GitHub Exploit DB Packet Storm