Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241031 2.1 注意 Drupal
Karen Stevenson		 - Drupal 用 の Date モジュールの Date Tools サブモジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3156 2012-06-26 16:18 2009-07-29 Show GitHub Exploit DB Packet Storm
241032 4.3 警告 almondsoft
Joomla!		 - Joomla! の aclassf コンポーネントの gmap.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3155 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241033 7.5 危険 almondsoft
Joomla!		 - Joomla! の aclassf コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3154 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241034 4.3 警告 curveriderhq - Elgg の _css/js.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3149 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241035 4.3 警告 allenthusiast - ReviewPost Pro vB3 の showproduct.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3147 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241036 4.3 警告 articlefriend - ArticleFriend Script の search_advance.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3146 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241037 6.4 警告 Drupal
chris shattuck		 - Drupal の Ajax Table モジュールにおける任意のユーザを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3122 2012-06-26 16:18 2009-08-26 Show GitHub Exploit DB Packet Storm
241038 4.3 警告 Drupal
chris shattuck		 - Drupal の Ajax Table モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3121 2012-06-26 16:18 2009-08-26 Show GitHub Exploit DB Packet Storm
241039 4.3 警告 BIGACE - BIGACE Web CMS の public/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3120 2012-06-26 16:18 2009-09-9 Show GitHub Exploit DB Packet Storm
241040 7.5 危険 danneo - Danneo CMS の mod/poll/comment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3118 2012-06-26 16:18 2009-09-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267471 - oracle solaris Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via unknown vectors related to Zones. NVD-CWE-noinfo
CVE-2016-0618 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm
267472 - redhat
canonical
mariadb
oracle
opensuse
debian 		enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server_eus
enterprise_linux_hpc_… 		Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via u… NVD-CWE-noinfo
CVE-2016-0616 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm
267473 - oracle business_intelligence_publisher Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unkno… NVD-CWE-noinfo
CVE-2016-0614 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm
267474 - canonical
oracle
opensuse
redhat 		ubuntu_linux
mysql
leap
opensuse
enterprise_linux 		Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer. CWE-284
Improper Access Control 		CVE-2016-0611 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm
267475 - oracle
debian
mariadb
opensuse
redhat
canonical 		mysql
debian_linux
mariadb
leap
opensuse
enterprise_linux
ubuntu_linux 		Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown vectors related t… NVD-CWE-noinfo
CVE-2016-0610 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm
267476 - oracle
redhat
debian
opensuse
canonical
mariadb 		linux
enterprise_linux
debian_linux
solaris
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node… 		Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated use… NVD-CWE-noinfo
CVE-2016-0609 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm
267477 - oracle
redhat
debian
canonical
opensuse
mariadb 		linux
enterprise_linux
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server… 		Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated use… NVD-CWE-noinfo
CVE-2016-0608 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm
267478 - redhat
oracle
opensuse
canonical 		enterprise_linux
mysql
leap
opensuse
ubuntu_linux 		Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication. NVD-CWE-noinfo
CVE-2016-0607 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm
267479 - debian
redhat
opensuse
oracle
canonical
mariadb 		debian_linux
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server_eus
enter… 		Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated use… NVD-CWE-noinfo
CVE-2016-0606 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm
267480 - redhat
opensuse
oracle 		enterprise_linux
leap
opensuse
mysql 		Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors. NVD-CWE-noinfo
CVE-2016-0605 2024-11-21 11:42 2016-01-21 Show GitHub Exploit DB Packet Storm