Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241021 7.8 危険 シスコシステムズ - Cisco ASA 5580 シリーズにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4915 2012-06-26 16:19 2009-04-6 Show GitHub Exploit DB Packet Storm
241022 7.8 危険 シスコシステムズ - Cisco ASA 5580 シリーズにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4914 2012-06-26 16:19 2009-04-6 Show GitHub Exploit DB Packet Storm
241023 6.8 警告 accscripts - Acc PHP eMail の index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4906 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
241024 6.8 警告 accscripts - Acc Statistics の index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4905 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
241025 5 警告 dootzky - oBlog の article.php におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4904 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
241026 4.3 警告 dootzky - oBlog の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4903 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
241027 9.3 危険 Artifex Software - Ghostscript の gs/psi/iscan.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4897 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
241028 7.5 危険 CS-Cart - CS-Cart Beta の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4891 2012-06-26 16:19 2010-06-11 Show GitHub Exploit DB Packet Storm
241029 7.5 危険 PHP-Fusion
basti2web		 - PHP-Fusion の book_panel モジュールの books.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4889 2012-06-26 16:19 2010-06-11 Show GitHub Exploit DB Packet Storm
241030 5 警告 bernhard frohlich - phpCommunity 2 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4886 2012-06-26 16:19 2010-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267241 5.5 MEDIUM
Local 		calibre-ebook calibre The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10187 2024-11-21 11:43 2017-03-17 Show GitHub Exploit DB Packet Storm
267242 5.5 MEDIUM
Local 		artifex
debian 		mupdf
debian_linux 		Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a cr… CWE-787
 Out-of-bounds Write 		CVE-2016-10247 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
267243 5.5 MEDIUM
Local 		artifex
debian 		mupdf
debian_linux 		Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted … CWE-787
 Out-of-bounds Write 		CVE-2016-10246 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
267244 7.5 HIGH
Network 		debian
libevent_project 		debian_linux
libevent 		The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname. CWE-125
Out-of-bounds Read 		CVE-2016-10197 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
267245 7.5 HIGH
Network 		debian
libevent_project
mozilla 		debian_linux
libevent
thunderbird
firefox
firefox_esr 		Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involvi… CWE-787
 Out-of-bounds Write 		CVE-2016-10196 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
267246 9.8 CRITICAL
Network 		libevent_project
debian 		libevent
debian_linux 		The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack… CWE-125
Out-of-bounds Read 		CVE-2016-10195 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
267247 7.8 HIGH
Local 		libgd libgd Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks i… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-10168 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
267248 5.5 MEDIUM
Local 		libgd libgd The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file. CWE-20
 Improper Input Validation  		CVE-2016-10167 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
267249 9.8 CRITICAL
Network 		libgd libgd Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors relate… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2016-10166 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
267250 6.5 MEDIUM
Local 		virglrenderer_project virglrenderer Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) b… CWE-399
 Resource Management Errors 		CVE-2016-10163 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm