Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241321	4.3	警告	ecardmax.com	-	eCardMAX FormXP の survey_result.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3598	2012-06-26 16:18	2009-10-8	Show	GitHub Exploit DB Packet Storm

241322	5	警告	digitaldesign	-	Digitaldesign CMS におけるデータベースファイルをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3597	2012-06-26 16:18	2009-10-8	Show	GitHub Exploit DB Packet Storm

241323	4.3	警告	blob	-	BLOB Blog System の bpost.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3594	2012-06-26 16:18	2009-10-8	Show	GitHub Exploit DB Packet Storm

241324	4.3	警告	freewebscriptz	-	Freelancers におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3593	2012-06-26 16:18	2009-10-8	Show	GitHub Exploit DB Packet Storm

241325	5	警告	ben webb	-	Dopewars におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-3591	2012-06-26 16:18	2009-10-5	Show	GitHub Exploit DB Packet Storm

241326	7.5	危険	frank yaul	-	CoreHTTP の src/http.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-3586	2012-06-26 16:18	2009-12-8	Show	GitHub Exploit DB Packet Storm

241327	5.8	警告	Best Practical Solutions	-	Best Practical Solutions RT の html/Elements/SetupSessionCookie におけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2009-3585	2012-06-26 16:18	2009-11-30	Show	GitHub Exploit DB Packet Storm

241328	9.3	危険	オートデスク株式会社	-	Autodesk Maya における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3578	2012-06-26 16:18	2009-11-24	Show	GitHub Exploit DB Packet Storm

241329	9.3	危険	オートデスク株式会社	-	3DSMax における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3577	2012-06-26 16:18	2009-11-24	Show	GitHub Exploit DB Packet Storm

241330	9.3	危険	オートデスク株式会社	-	Autodesk Softimage および Softimage XSI における任意の JavaScript コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3576	2012-06-26 16:18	2009-11-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267061	9.8	CRITICAL Network	bitlbee	bitlbee	Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file transfer connection to exp…	CWE-416 Use After Free	CVE-2016-10188	2024-11-21 11:43	2017-03-14	Show	GitHub Exploit DB Packet Storm

267062	5.5	MEDIUM Local	wavpack_project	wavpack	The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.	CWE-125 Out-of-bounds Read	CVE-2016-10172	2024-11-21 11:43	2017-03-14	Show	GitHub Exploit DB Packet Storm

267063	5.5	MEDIUM Local	wavpack_project	wavpack	The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.	CWE-125 Out-of-bounds Read	CVE-2016-10171	2024-11-21 11:43	2017-03-14	Show	GitHub Exploit DB Packet Storm

267064	5.5	MEDIUM Local	wavpack_project	wavpack	The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.	CWE-125 Out-of-bounds Read	CVE-2016-10170	2024-11-21 11:43	2017-03-14	Show	GitHub Exploit DB Packet Storm

267065	5.5	MEDIUM Local	wavpack_project	wavpack	The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.	CWE-125 Out-of-bounds Read	CVE-2016-10169	2024-11-21 11:43	2017-03-14	Show	GitHub Exploit DB Packet Storm

267066	7.0	HIGH Local	linux google	linux_kernel android	Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind sys…	CWE-264 CWE-362 CWE-416 Permissions, Privileges, and Access Controls Race Condition Use After Free	CVE-2016-10200	2024-11-21 11:43	2017-03-8	Show	GitHub Exploit DB Packet Storm

267067	5.5	MEDIUM Local	qt	qxmlsimplereader	Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-10040	2024-11-21 11:43	2017-03-8	Show	GitHub Exploit DB Packet Storm

267068	7.8	HIGH Local	freetype debian	freetype debian_linux	The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buf…	CWE-125 Out-of-bounds Read	CVE-2016-10244	2024-11-21 11:43	2017-03-6	Show	GitHub Exploit DB Packet Storm

267069	5.5	MEDIUM Local	imagemagick opensuse	imagemagick leap	Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via…	CWE-125 Out-of-bounds Read	CVE-2016-10070	2024-11-21 11:43	2017-03-4	Show	GitHub Exploit DB Packet Storm

267070	5.5	MEDIUM Local	imagemagick	imagemagick	Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a crafted file.	CWE-120 Classic Buffer Overflow	CVE-2016-10066	2024-11-21 11:43	2017-03-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed