Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241351 7.5 危険 Activewebsoftwares - Active Web Softwares eWebquiz における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4436 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
241352 6.8 警告 compmaster.prv.pl - F3Site 2009 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4435 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
241353 7.5 危険 codemight - CodeMight VideoCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4432 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
241354 7.5 危険 anything-digital
Joomla!		 - Joomla! の Anything Digital Development JCal Pro コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4431 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
241355 3.5 注意 Drupal
alexander hass		 - Drupal の Sections モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4429 2012-06-26 16:18 2009-12-16 Show GitHub Exploit DB Packet Storm
241356 7.5 危険 Deon George - phpLDAPadmin のcmd.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4427 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
241357 4.3 警告 aditus - Aditus Consulting JpGraph の GetURLArguments 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4422 2012-06-26 16:18 2009-12-24 Show GitHub Exploit DB Packet Storm
241358 6.5 警告 Alexander Palmo - Simple PHP Blog の languages_cgi.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4421 2012-06-26 16:18 2009-12-24 Show GitHub Exploit DB Packet Storm
241359 7.5 危険 edgewall - Trac における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-4405 2012-06-26 16:18 2009-12-23 Show GitHub Exploit DB Packet Storm
241360 7.5 危険 daniel ptzinger
TYPO3 Association		 - TYPO3 用の Document Directorys 拡張機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4393 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268511 5.5 MEDIUM
Local 		ibm bigfix WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report. CWE-200
Information Exposure 		CVE-2016-0292 2024-11-21 11:41 2016-08-31 Show GitHub Exploit DB Packet Storm
268512 3.3 LOW
Local 		ibm sterling_connect\ IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0380 2024-11-21 11:41 2016-08-8 Show GitHub Exploit DB Packet Storm
268513 6.5 MEDIUM
Network 		ibm general_parallel_file_system IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticate… NVD-CWE-noinfo
CVE-2016-0361 2024-11-21 11:41 2016-08-8 Show GitHub Exploit DB Packet Storm
268514 3.7 LOW
Network 		ibm aix
vios 		The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to cause a denial of service (FC1763 or FC5899 adapter cras… CWE-20
 Improper Input Validation  		CVE-2016-0281 2024-11-21 11:41 2016-08-8 Show GitHub Exploit DB Packet Storm
268515 3.7 LOW
Network 		ibm vios
aix 		IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors. CWE-254
 7PK - Security Features 		CVE-2016-0266 2024-11-21 11:41 2016-08-8 Show GitHub Exploit DB Packet Storm
268516 5.4 MEDIUM
Network 		ibm information_server_framework
infosphere_information_governance_catalog
infosphere_information_server_business_glossary 		Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server F… CWE-79
Cross-site Scripting 		CVE-2016-0280 2024-11-21 11:41 2016-08-8 Show GitHub Exploit DB Packet Storm
268517 5.3 MEDIUM
Network 		ibm maximo_asset_management IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files. CWE-200
Information Exposure 		CVE-2016-0393 2024-11-21 11:41 2016-07-18 Show GitHub Exploit DB Packet Storm
268518 6.2 MEDIUM
Local 		ibm personal_communications IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging acces… CWE-200
Information Exposure 		CVE-2016-0321 2024-11-21 11:41 2016-07-18 Show GitHub Exploit DB Packet Storm
268519 4.3 MEDIUM
Network 		ibm security_identity_manager_adapter IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site. CWE-284
Improper Access Control 		CVE-2016-0357 2024-11-21 11:41 2016-07-16 Show GitHub Exploit DB Packet Storm
268520 7.4 HIGH
Local 		ibm security_identity_manager_adapter IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveragin… CWE-284
Improper Access Control 		CVE-2016-0340 2024-11-21 11:41 2016-07-16 Show GitHub Exploit DB Packet Storm