Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241121 7.5 危険 almondsoft
Joomla!
- Joomla! の aclassf コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2567 2012-06-26 16:10 2009-07-22 Show GitHub Exploit DB Packet Storm
241122 7.5 危険 adminnewstools - Admin News Tools の system/message.php におけるニュースを投稿される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2558 2012-06-26 16:10 2009-07-21 Show GitHub Exploit DB Packet Storm
241123 5 警告 adminnewstools - Admin News Tools の system/download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2557 2012-06-26 16:10 2009-07-21 Show GitHub Exploit DB Packet Storm
241124 5 警告 bistudio - Armed Assault および Armed Assault II におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-2549 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241125 10 危険 bistudio - Armed Assault および Armed Assault II におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2009-2548 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241126 5 警告 bistudio - Armed Assault および Armed Assault II における整数アンダーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-2547 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241127 4.3 警告 AEF Group - AEF におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2546 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241128 6.8 警告 AEF Group - AEF における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2545 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241129 7.8 危険 aigo - Aigo P8860 におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2009-2539 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241130 7.2 危険 forkosh - mathTeX の mathtex.cgi における詳細不明な脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2461 2012-06-26 16:10 2009-07-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267221 8.8 HIGH
Network
apache
opensuse
mod_fcgid
leap
opensuse
A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07. CWE-20
 Improper Input Validation 
CVE-2016-1000104 2024-11-21 11:42 2019-12-4 Show GitHub Exploit DB Packet Storm
267222 6.1 MEDIUM
Network
python
debian
fedoraproject
python
debian_linux
fedora
The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests. CWE-601
Open Redirect
CVE-2016-1000110 2024-11-21 11:42 2019-11-28 Show GitHub Exploit DB Packet Storm
267223 9.8 CRITICAL
Network
facebook hhvm hhvm before 3.12.11 has a use-after-free in the serialize_memoize_param() and ResourceBundle::__construct() functions. CWE-416
 Use After Free
CVE-2016-1000006 2024-11-21 11:42 2019-11-20 Show GitHub Exploit DB Packet Storm
267224 6.1 MEDIUM
Network
redhat
fedoraproject
pagure
fedora
enterprise_linux
Pagure: XSS possible in file attachment endpoint CWE-79
Cross-site Scripting
CVE-2016-1000037 2024-11-21 11:42 2019-11-7 Show GitHub Exploit DB Packet Storm
267225 2.4 LOW
Physics
gnome
redhat
debian
opensuse
gnome_display_manager
enterprise_linux
debian_linux
leap
gdm3 3.14.2 and possibly later has an information leak before screen lock CWE-200
Information Exposure
CVE-2016-1000002 2024-11-21 11:42 2019-11-5 Show GitHub Exploit DB Packet Storm
267226 5.9 MEDIUM
Network
pivotal_software cloud_foundry_elastic_runtime Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigatio… CWE-200
Information Exposure
CVE-2016-0715 2024-11-21 11:42 2018-09-12 Show GitHub Exploit DB Packet Storm
267227 8.8 HIGH
Network
infinispan infinispan The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-craf… CWE-502
 Deserialization of Untrusted Data
CVE-2016-0750 2024-11-21 11:42 2018-09-11 Show GitHub Exploit DB Packet Storm
267228 9.8 CRITICAL
Network
suse
pidgin
linux_enterprise_server
pidgin
Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and gnutls_x509_crt_import() that can res… CWE-295
Improper Certificate Validation 
CVE-2016-1000030 2024-11-21 11:42 2018-09-6 Show GitHub Exploit DB Packet Storm
267229 5.9 MEDIUM
Network
cloudfoundry java_buildpack
cf-release
Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to environment variables and bound service deta… CWE-200
Information Exposure
CVE-2016-0708 2024-11-21 11:42 2018-07-12 Show GitHub Exploit DB Packet Storm
267230 10.0 CRITICAL
Network
vmware pivotal_software_mysql MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were n… CWE-255
CWE-532
Credentials Management
 Inclusion of Sensitive Information in Log Files
CVE-2016-0898 2024-11-21 11:42 2018-03-30 Show GitHub Exploit DB Packet Storm