Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241391 6.8 警告 e-cart - e-cart.biz Free Shopping Cart の admin/editor/image.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-1447 2012-06-26 16:10 2009-04-27 Show GitHub Exploit DB Packet Storm
241392 6.5 警告 elkagroup - Elkagroup Image Gallery の upload.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1446 2012-06-26 16:10 2009-04-27 Show GitHub Exploit DB Packet Storm
241393 6.8 警告 amule - amule の DownloadListCtrl.cpp における 引数インジェクション攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2009-1440 2012-06-26 16:10 2009-04-27 Show GitHub Exploit DB Packet Storm
241394 9.3 危険 coolplayer - PortableApps CoolPlayer Portable におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1437 2012-06-26 16:10 2009-04-27 Show GitHub Exploit DB Packet Storm
241395 4.9 警告 FreeBSD - FreeBSD の libc の db インターフェースにおける重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1436 2012-06-26 16:10 2009-04-22 Show GitHub Exploit DB Packet Storm
241396 6.8 警告 Foswiki - Foswiki におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-1434 2012-06-26 16:10 2009-04-30 Show GitHub Exploit DB Packet Storm
241397 5 警告 GNU Project - GnuTLS の gnutls-cli における有効化前の証明書を承認される脆弱性 CWE-310
暗号の問題 		CVE-2009-1417 2012-06-26 16:10 2009-04-30 Show GitHub Exploit DB Packet Storm
241398 7.5 危険 GNU Project - GnuTLS の libgnutls の lib/gnutls_pk.c における証明書上の署名を偽装される脆弱性 CWE-310
暗号の問題 		CVE-2009-1416 2012-06-26 16:10 2009-04-20 Show GitHub Exploit DB Packet Storm
241399 4.3 警告 GNU Project - GnuTLS の libgnutls の lib/pk-libgcrypt.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-1415 2012-06-26 16:10 2009-04-30 Show GitHub Exploit DB Packet Storm
241400 5.1 警告 e107.org - e107 の usersettings.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1409 2012-06-26 16:10 2009-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267031 8.1 HIGH
Network 		hiteksoftware automize Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for G… CWE-255
CWE-326
Credentials Management
Inadequate Encryption Strength 		CVE-2016-10103 2024-11-21 11:43 2017-01-23 Show GitHub Exploit DB Packet Storm
267032 8.1 HIGH
Network 		hiteksoftware automize hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. This allows an attacker to retrieve the encrypted passwords from sshProfiles.jsd… CWE-326
Inadequate Encryption Strength 		CVE-2016-10102 2024-11-21 11:43 2017-01-23 Show GitHub Exploit DB Packet Storm
267033 8.1 HIGH
Network 		hiteksoftware automize Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Pa… CWE-255
CWE-326
Credentials Management
Inadequate Encryption Strength 		CVE-2016-10101 2024-11-21 11:43 2017-01-23 Show GitHub Exploit DB Packet Storm
267034 7.5 HIGH
Network 		tiki tikiwiki_cms\/groupware A vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a targeted system via a crafted pathname in a banner URL field. CWE-200
Information Exposure 		CVE-2016-10143 2024-11-21 11:43 2017-01-20 Show GitHub Exploit DB Packet Storm
267035 7.8 HIGH
Local 		tqdm_project tqdm The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory. CWE-17
Code 		CVE-2016-10075 2024-11-21 11:43 2017-01-20 Show GitHub Exploit DB Packet Storm
267036 8.1 HIGH
Network 		ca service_desk_management
service_desk_manager 		RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10086 2024-11-21 11:43 2017-01-19 Show GitHub Exploit DB Packet Storm
267037 4.3 MEDIUM
Network 		wordpress wordpress The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which allows remote authen… CWE-254
CWE-284
 7PK - Security Features
Improper Access Control 		CVE-2016-10148 2024-11-21 11:43 2017-01-19 Show GitHub Exploit DB Packet Storm
267038 5.5 MEDIUM
Local 		linux linux_kernel crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm… CWE-476
 NULL Pointer Dereference 		CVE-2016-10147 2024-11-21 11:43 2017-01-19 Show GitHub Exploit DB Packet Storm
267039 8.6 HIGH
Network 		ietf ipv6 An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. (The scope of this CVE is all affected IPv6 implementations from all vendors.) The security … CWE-17
Code 		CVE-2016-10142 2024-11-21 11:43 2017-01-14 Show GitHub Exploit DB Packet Storm
267040 9.8 CRITICAL
Network 		artifex mujs An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expres… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-10141 2024-11-21 11:43 2017-01-13 Show GitHub Exploit DB Packet Storm