Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241221 4.3 警告 daniel regelein
TYPO3 Association		 - TYPO3 用の File list 拡張機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4391 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
241222 4.3 警告 frank krger
TYPO3 Association		 - TYPO3 の nl_listman 拡張におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4388 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
241223 7.5 危険 bookingcentre - Venalsur Booking Centre Booking System の hotel_tiempolibre_ext.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4386 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
241224 7.5 危険 AlienVault - AlienVault OSSIM の repository/repository_attachment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4375 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
241225 7.5 危険 AlienVault - AlienVault OSSIM の repository/repository_attachment.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4374 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
241226 7.5 危険 AlienVault - AlienVault OSSIM の repository/repository_attachment.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4373 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
241227 7.5 危険 AlienVault - AlienVault OSSIM における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4372 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
241228 3.5 注意 Drupal - Drupal Core の Locale モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4371 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
241229 7.5 危険 fr.simon rundell
TYPO3 Association		 - TYPO3 の ste_parish_admin 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4401 2012-06-26 16:18 2008-07-9 Show GitHub Exploit DB Packet Storm
241230 4.3 警告 fr.simon rundell
TYPO3 Association		 - TYPO3 の ste_parish_admin 拡張におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4400 2012-06-26 16:18 2008-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267081 7.5 HIGH
Network 		sendio sendio Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted … CWE-538
 File and Directory Information Exposure 		CVE-2016-10399 2024-11-21 11:43 2017-07-28 Show GitHub Exploit DB Packet Storm
267082 7.8 HIGH
Local 		avira antivirus Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer ov… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10402 2024-11-21 11:43 2017-07-27 Show GitHub Exploit DB Packet Storm
267083 8.8 HIGH
Network 		zyxel pk5001z_firmware ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists … CWE-255
Credentials Management 		CVE-2016-10401 2024-11-21 11:43 2017-07-26 Show GitHub Exploit DB Packet Storm
267084 7.5 HIGH
Network 		atutor atutor Directory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/_core/courses/users/create_course.php. The attacker can read an arbitrary file by visiting get_course_icon.php?id= af… CWE-22
Path Traversal 		CVE-2016-10400 2024-11-21 11:43 2017-07-23 Show GitHub Exploit DB Packet Storm
267085 6.2 MEDIUM
Physics 		google android Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens (AuthTokens) used by the Trusted Execution Environment (TEE) are protected by… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10398 2024-11-21 11:43 2017-07-17 Show GitHub Exploit DB Packet Storm
267086 7.5 HIGH
Network 		php php In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.e… CWE-20
 Improper Input Validation  		CVE-2016-10397 2024-11-21 11:43 2017-07-10 Show GitHub Exploit DB Packet Storm
267087 7.5 HIGH
Network 		ipsec-tools ipsec-tools The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhau… CWE-407
 Inefficient Algorithmic Complexity 		CVE-2016-10396 2024-11-21 11:43 2017-07-6 Show GitHub Exploit DB Packet Storm
267088 7.5 HIGH
Network 		arcadyan swisscom_internet-box_firmware Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticat… CWE-284
Improper Access Control 		CVE-2016-10042 2024-11-21 11:43 2017-06-29 Show GitHub Exploit DB Packet Storm
267089 6.1 MEDIUM
Network 		elastic kibana Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack. CWE-79
Cross-site Scripting 		CVE-2016-10366 2024-11-21 11:43 2017-06-17 Show GitHub Exploit DB Packet Storm
267090 6.1 MEDIUM
Network 		elastic kibana Kibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an attacker to craft a link in the Kibana domain that redirects to an arbitrary website. CWE-601
Open Redirect 		CVE-2016-10365 2024-11-21 11:43 2017-06-17 Show GitHub Exploit DB Packet Storm