Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241261 7.8 危険 2wire - 複数の 2wire 製品の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-3962 2012-06-26 16:18 2009-11-17 Show GitHub Exploit DB Packet Storm
241262 4.3 警告 bract - Bractus SunTrack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3950 2012-06-26 16:18 2009-11-16 Show GitHub Exploit DB Packet Storm
241263 4.3 警告 JetAudio - JetAudio の COWON Media Center におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3948 2012-06-26 16:18 2009-11-16 Show GitHub Exploit DB Packet Storm
241264 5.8 警告 シトリックス・システムズ - Citrix Online プラグインなどの製品における SSL/TLS サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-3936 2012-06-26 16:18 2009-11-9 Show GitHub Exploit DB Packet Storm
241265 9.3 危険 file project - Christos Zoulas の file における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3930 2012-06-26 16:18 2009-11-10 Show GitHub Exploit DB Packet Storm
241266 6.8 警告 Drupal
chad phillips		 - Drupal のモジュールの User Protect モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-3922 2012-06-26 16:18 2009-11-9 Show GitHub Exploit DB Packet Storm
241267 4 警告 Ezra Barnett Gildesgame
Drupal		 - Drupal の Smartqueue_og モジュールにおける任意の基本的なグループ名を発見される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3921 2012-06-26 16:18 2009-11-4 Show GitHub Exploit DB Packet Storm
241268 4.3 警告 Drupal
greg knaddison		 - S5 Presentation Player モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3917 2012-06-26 16:18 2009-11-4 Show GitHub Exploit DB Packet Storm
241269 9.3 危険 The GIMP Team - GIMP の plug-ins/file-psd/psd-load.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3909 2012-06-26 16:18 2009-11-16 Show GitHub Exploit DB Packet Storm
241270 4.3 警告 ecouriersoftware - e-Courier CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3905 2012-06-26 16:18 2009-11-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267131 9.8 CRITICAL
Network 		dlink dwr-932b_firmware An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters. CWE-77
Command Injection 		CVE-2016-10182 2024-11-21 11:43 2017-01-30 Show GitHub Exploit DB Packet Storm
267132 7.5 HIGH
Network 		dlink dwr-932b_firmware An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=get_homeCfg requests. CWE-200
Information Exposure 		CVE-2016-10181 2024-11-21 11:43 2017-01-30 Show GitHub Exploit DB Packet Storm
267133 7.5 HIGH
Network 		dlink dwr-932b_firmware An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding. CWE-335
 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) 		CVE-2016-10180 2024-11-21 11:43 2017-01-30 Show GitHub Exploit DB Packet Storm
267134 7.5 HIGH
Network 		dlink dwr-932b_firmware An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607. CWE-798
 Use of Hard-coded Credentials 		CVE-2016-10179 2024-11-21 11:43 2017-01-30 Show GitHub Exploit DB Packet Storm
267135 9.8 CRITICAL
Network 		dlink dwr-932b_firmware An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command. CWE-254
 7PK - Security Features 		CVE-2016-10178 2024-11-21 11:43 2017-01-30 Show GitHub Exploit DB Packet Storm
267136 9.8 CRITICAL
Network 		dlink dwr-932b_firmware An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234. CWE-798
 Use of Hard-coded Credentials 		CVE-2016-10177 2024-11-21 11:43 2017-01-30 Show GitHub Exploit DB Packet Storm
267137 9.8 CRITICAL
Network 		netgear wnr2000v5_firmware The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password… CWE-200
Information Exposure 		CVE-2016-10175 2024-11-21 11:43 2017-01-30 Show GitHub Exploit DB Packet Storm
267138 9.8 CRITICAL
Network 		netgear wnr2000v5_firmware The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server… CWE-20
 Improper Input Validation  		CVE-2016-10176 2024-11-21 11:43 2017-01-30 Show GitHub Exploit DB Packet Storm
267139 7.5 HIGH
Network 		squid-cache squid Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as … CWE-697
 Incorrect Comparison 		CVE-2016-10003 2024-11-21 11:43 2017-01-28 Show GitHub Exploit DB Packet Storm
267140 7.5 HIGH
Network 		debian
squid-cache 		debian_linux
squid 		Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Co… CWE-200
Information Exposure 		CVE-2016-10002 2024-11-21 11:43 2017-01-28 Show GitHub Exploit DB Packet Storm