Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241551 7.5 危険 fijiwebdesign
Joomla!		 - Joomla! 用 PHP コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2400 2012-06-26 16:10 2009-07-9 Show GitHub Exploit DB Packet Storm
241552 6.8 警告 dutchmonkey - DM FileManager の dm-albums/template/album.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2399 2012-06-26 16:10 2009-07-9 Show GitHub Exploit DB Packet Storm
241553 5 警告 audioarticledirectory - Audio Article Directory の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2397 2012-06-26 16:10 2009-07-9 Show GitHub Exploit DB Packet Storm
241554 9.3 危険 dutchmonkey - DM Albums の template/album.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2396 2012-06-26 16:10 2009-07-9 Show GitHub Exploit DB Packet Storm
241555 7.5 危険 f-cimag-in
Joomla!		 - Joomla! 用 BookFlip コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2390 2012-06-26 16:10 2009-07-9 Show GitHub Exploit DB Packet Storm
241556 9.3 危険 awingsoft - Awingsoft Awakening Winds3D Viewer プラグインにおける任意のファイルをダウンロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2386 2012-06-26 16:10 2009-07-10 Show GitHub Exploit DB Packet Storm
241557 7.5 危険 Simple Machines
fustrate		 - SMF 用 Member Awards コンポーネントの awardsMembers 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2385 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
241558 7.5 危険 blogtrafficexchange
WordPress.org		 - WordPress 用の Related Sites プラグインの BTE_RW_Webajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2383 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
241559 5 警告 gizmo5 - Linux 上の Gizmo における任意のユーザの資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2381 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
241560 4.3 警告 4homepages - 4images の includes/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2380 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266951 7.5 HIGH
Network 		oneplus oxygenos An issue was discovered on OnePlus devices such as the 3T. The OnePlus OTA Updater pushes the signed-OTA image over HTTP without TLS. While it does not allow for installation of arbitrary OTAs (due t… CWE-284
Improper Access Control 		CVE-2016-10370 2024-11-21 11:43 2017-05-12 Show GitHub Exploit DB Packet Storm
266952 5.5 MEDIUM
Local 		libtiff libtiff The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF f… CWE-20
 Improper Input Validation  		CVE-2016-10371 2024-11-21 11:43 2017-05-10 Show GitHub Exploit DB Packet Storm
266953 7.8 HIGH
Local 		lxterminal_project lxterminal unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypass… CWE-284
Improper Access Control 		CVE-2016-10369 2024-11-21 11:43 2017-05-9 Show GitHub Exploit DB Packet Storm
266954 6.1 MEDIUM
Network 		opsview opsview Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch) allows remote attackers … CWE-601
Open Redirect 		CVE-2016-10368 2024-11-21 11:43 2017-05-3 Show GitHub Exploit DB Packet Storm
266955 7.5 HIGH
Network 		opsview opsview In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch), an unauthenticated Directory Traversal vulnerabilit… CWE-22
Path Traversal 		CVE-2016-10367 2024-11-21 11:43 2017-05-3 Show GitHub Exploit DB Packet Storm
266956 9.8 CRITICAL
Network 		debian
fedoraproject
tug 		debian_linux
fedora
tex_live 		TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file. CWE-20
 Improper Input Validation  		CVE-2016-10243 2024-11-21 11:43 2017-05-2 Show GitHub Exploit DB Packet Storm
266957 5.5 MEDIUM
Local 		telegram_desktop telegram_desktop Telegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesktop, which allows local users to obtain sensitive authentication information via standard filesystem operations. CWE-200
Information Exposure 		CVE-2016-10351 2024-11-21 11:43 2017-05-1 Show GitHub Exploit DB Packet Storm
266958 5.5 MEDIUM
Local 		libarchive libarchive The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and applica… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10350 2024-11-21 11:43 2017-05-1 Show GitHub Exploit DB Packet Storm
266959 5.5 MEDIUM
Local 		libarchive libarchive The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10349 2024-11-21 11:43 2017-05-1 Show GitHub Exploit DB Packet Storm
266960 7.5 HIGH
Network 		unrtf_project unrtf Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3)… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10091 2024-11-21 11:43 2017-04-22 Show GitHub Exploit DB Packet Storm