Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241031 2.1 注意 Drupal
Karen Stevenson
- Drupal 用 の Date モジュールの Date Tools サブモジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3156 2012-06-26 16:18 2009-07-29 Show GitHub Exploit DB Packet Storm
241032 4.3 警告 almondsoft
Joomla!
- Joomla! の aclassf コンポーネントの gmap.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3155 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241033 7.5 危険 almondsoft
Joomla!
- Joomla! の aclassf コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3154 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241034 4.3 警告 curveriderhq - Elgg の _css/js.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3149 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241035 4.3 警告 allenthusiast - ReviewPost Pro vB3 の showproduct.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3147 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241036 4.3 警告 articlefriend - ArticleFriend Script の search_advance.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3146 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
241037 6.4 警告 Drupal
chris shattuck
- Drupal の Ajax Table モジュールにおける任意のユーザを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3122 2012-06-26 16:18 2009-08-26 Show GitHub Exploit DB Packet Storm
241038 4.3 警告 Drupal
chris shattuck
- Drupal の Ajax Table モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3121 2012-06-26 16:18 2009-08-26 Show GitHub Exploit DB Packet Storm
241039 4.3 警告 BIGACE - BIGACE Web CMS の public/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3120 2012-06-26 16:18 2009-09-9 Show GitHub Exploit DB Packet Storm
241040 7.5 危険 danneo - Danneo CMS の mod/poll/comment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3118 2012-06-26 16:18 2009-09-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267721 4.3 MEDIUM
Network
ibm db2
db2_connect
IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted DRDA mess… CWE-20
 Improper Input Validation 
CVE-2016-0211 2024-11-21 11:41 2016-04-28 Show GitHub Exploit DB Packet Storm
267722 6.1 MEDIUM
Network
oracle business_intelligence Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confide… NVD-CWE-noinfo
CVE-2016-0479 2024-11-21 11:41 2016-04-21 Show GitHub Exploit DB Packet Storm
267723 5.5 MEDIUM
Local
oracle micros_c2 Unspecified vulnerability in the Oracle Retail MICROS C2 component in Oracle Retail Applications 9.89.0.0 allows local users to affect confidentiality via vectors related to POS. NVD-CWE-noinfo
CVE-2016-0469 2024-11-21 11:41 2016-04-21 Show GitHub Exploit DB Packet Storm
267724 5.4 MEDIUM
Network
oracle business_intelligence Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affe… NVD-CWE-noinfo
CVE-2016-0468 2024-11-21 11:41 2016-04-21 Show GitHub Exploit DB Packet Storm
267725 5.4 MEDIUM
Network
oracle peoplesoft_enterprise_peopletools Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity … NVD-CWE-noinfo
CVE-2016-0408 2024-11-21 11:41 2016-04-21 Show GitHub Exploit DB Packet Storm
267726 6.5 MEDIUM
Network
oracle peoplesoft_enterprise_human_capital_management_human_resources Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusio… NVD-CWE-noinfo
CVE-2016-0407 2024-11-21 11:41 2016-04-21 Show GitHub Exploit DB Packet Storm
267727 7.5 HIGH
Network
microsoft internet_explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vuln… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-0166 2024-11-21 11:41 2016-04-13 Show GitHub Exploit DB Packet Storm
267728 7.5 HIGH
Network
microsoft internet_explorer Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corrupti… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-0164 2024-11-21 11:41 2016-04-13 Show GitHub Exploit DB Packet Storm
267729 6.5 MEDIUM
Network
microsoft edge Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-015… CWE-254
 7PK - Security Features
CVE-2016-0161 2024-11-21 11:41 2016-04-13 Show GitHub Exploit DB Packet Storm
267730 7.8 HIGH
Local
microsoft internet_explorer Microsoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability." NVD-CWE-Other
CVE-2016-0160 2024-11-21 11:41 2016-04-13 Show GitHub Exploit DB Packet Storm