Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241081 8.3 危険 dd-wrt - DD-WRT 24 sp1 の管理 GUI の httpd の httpd.c における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2009-2765 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241082 7.2 危険 Avira - 複数の Avira 製品で使用されるスケジューラにおける権限を取得される脆弱性 CWE-Other
その他
CVE-2009-2761 2012-06-26 16:10 2009-08-13 Show GitHub Exploit DB Packet Storm
241083 7.5 危険 Achievo - Achievo の get_employee 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2734 2012-06-26 16:10 2009-10-11 Show GitHub Exploit DB Packet Storm
241084 4.3 警告 Achievo - Achievo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2733 2012-06-26 16:10 2009-10-11 Show GitHub Exploit DB Packet Storm
241085 7.8 危険 Digium - 複数の Asterisk 製品における SIP チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-2726 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
241086 5 警告 Django Software Foundation - Django の core/servers/basehttp.py の Admin メディアハンドラにおける任意のファイルを読まれる脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2659 2012-06-26 16:10 2009-08-4 Show GitHub Exploit DB Packet Storm
241087 5 警告 Digium - Asterisk Open Source の main/rtp.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-2651 2012-06-26 16:10 2009-07-27 Show GitHub Exploit DB Packet Storm
241088 4.7 警告 FreeBSD - FreeBSD の IATA (ata) ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2649 2012-06-26 16:10 2009-07-30 Show GitHub Exploit DB Packet Storm
241089 5 警告 flashden - FlashDen Guestbook における設定情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2648 2012-06-26 16:10 2009-07-30 Show GitHub Exploit DB Packet Storm
241090 10 危険 DELL EMC (旧 EMC Corporation) - ISM Portmapper サービスの librpc.dll の認証機能における整数符号化エラーの脆弱性 CWE-189
数値処理の問題
CVE-2009-2754 2012-06-26 16:10 2010-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267331 7.5 HIGH
Network
apache openmeetings The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging… CWE-200
Information Exposure
CVE-2016-0783 2024-11-21 11:42 2016-04-11 Show GitHub Exploit DB Packet Storm
267332 6.1 MEDIUM
Network
apache jetspeed Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal. CWE-79
Cross-site Scripting
CVE-2016-0712 2024-11-21 11:42 2016-04-11 Show GitHub Exploit DB Packet Storm
267333 6.1 MEDIUM
Network
apache jetspeed Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) p… CWE-79
Cross-site Scripting
CVE-2016-0711 2024-11-21 11:42 2016-04-11 Show GitHub Exploit DB Packet Storm
267334 8.8 HIGH
Network
apache jetspeed Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to s… CWE-89
SQL Injection
CVE-2016-0710 2024-11-21 11:42 2016-04-11 Show GitHub Exploit DB Packet Storm
267335 7.2 HIGH
Network
apache jetspeed Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and … CWE-22
Path Traversal
CVE-2016-0709 2024-11-21 11:42 2016-04-11 Show GitHub Exploit DB Packet Storm
267336 8.8 HIGH
Network
jenkins
redhat
jenkins
openshift
Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and… CWE-20
 Improper Input Validation 
CVE-2016-0792 2024-11-21 11:42 2016-04-8 Show GitHub Exploit DB Packet Storm
267337 9.8 CRITICAL
Network
redhat
jenkins
openshift
jenkins
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-fo… CWE-200
Information Exposure
CVE-2016-0791 2024-11-21 11:42 2016-04-8 Show GitHub Exploit DB Packet Storm
267338 5.3 MEDIUM
Network
jenkins
redhat
jenkins
openshift
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach. CWE-200
CWE-254
Information Exposure
 7PK - Security Features
CVE-2016-0790 2024-11-21 11:42 2016-04-8 Show GitHub Exploit DB Packet Storm
267339 6.1 MEDIUM
Network
jenkins
redhat
jenkins
openshift
CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitti… CWE-20
 Improper Input Validation 
CVE-2016-0789 2024-11-21 11:42 2016-04-8 Show GitHub Exploit DB Packet Storm
267340 9.8 CRITICAL
Network
jenkins
redhat
jenkins
openshift
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-0788 2024-11-21 11:42 2016-04-8 Show GitHub Exploit DB Packet Storm