Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241561 5 警告 brainjar - ASP Football Pool におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2606 2012-06-26 16:10 2009-07-27 Show GitHub Exploit DB Packet Storm
241562 7.5 危険 Escon Information Consulting - Escon SupportPortal Pro の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2603 2012-06-26 16:10 2009-07-27 Show GitHub Exploit DB Packet Storm
241563 5 警告 Akiva - Webboard の view.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2600 2012-06-26 16:10 2009-07-27 Show GitHub Exploit DB Packet Storm
241564 4.3 警告 censura - Censura の productSearch.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2595 2012-06-26 16:10 2009-07-24 Show GitHub Exploit DB Packet Storm
241565 4.3 警告 censura - Censura の censura.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2594 2012-06-26 16:10 2009-07-24 Show GitHub Exploit DB Packet Storm
241566 7.5 危険 censura - Censura の censura.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2593 2012-06-26 16:10 2009-07-24 Show GitHub Exploit DB Packet Storm
241567 4.3 警告 dragdropcart - DragDropCart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2587 2012-06-26 16:10 2009-07-24 Show GitHub Exploit DB Packet Storm
241568 4.3 警告 edgephp - EDGEPHP EZArticles の articles.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2586 2012-06-26 16:10 2009-07-24 Show GitHub Exploit DB Packet Storm
241569 9.3 危険 アカマイテクノロジーズ - Akamai Download Manager の manager.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2582 2012-06-26 16:10 2009-07-23 Show GitHub Exploit DB Packet Storm
241570 4.3 警告 editeurscripts - EditeurScripts EsNews の modifier.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2581 2012-06-26 16:10 2009-07-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266901 7.5 HIGH
Network
sequelizejs sequelize sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS In Postgres, SQLite, and Microso… CWE-89
SQL Injection
CVE-2016-10556 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
266902 9.8 CRITICAL
Network
balderdash waterline-sequel waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's `like`, `contains`, `startsWith`, or `endsWith` will end up in waterline-s… CWE-89
SQL Injection
CVE-2016-10551 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
266903 9.8 CRITICAL
Network
dwyl hapi-auth-jwt2 When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication. CWE-287
Improper Authentication
CVE-2016-10525 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
266904 9.8 CRITICAL
Network
partclone_project partclone partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-10722 2024-11-21 11:44 2018-05-3 Show GitHub Exploit DB Packet Storm
266905 9.8 CRITICAL
Network
partclone partclone partclone.restore in Partclone 0.2.87 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to execute arbitrary… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-10721 2024-11-21 11:44 2018-05-3 Show GitHub Exploit DB Packet Storm
266906 9.8 CRITICAL
Network
qualcomm mdm9635m_firmware In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, made changes to map the scan type value to an index value that is in range. CWE-118
Incorrect Access of Indexable Resource ('Range Error')
CVE-2016-10495 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266907 9.8 CRITICAL
Network
qualcomm sd_400_firmware In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, lack of address argument validation in qsee_get_tz_app_name() may lead to an untrusted pointer deref… CWE-476
 NULL Pointer Dereference
CVE-2016-10489 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266908 7.5 HIGH
Network
qualcomm sd_410_firmware
sd_412_firmware
sd_615_firmware
sd_616_firmware
sd_415_firmware
sd_808_firmware
sd_810_firmware
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, improper input validation while processing SCM Command can … CWE-20
 Improper Input Validation 
CVE-2016-10483 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266909 9.8 CRITICAL
Network
qualcomm sd_617_firmware In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 617, incorrect size calculation in QCRIL SCWS processing have Integer overflow which will lead to a buffe… CWE-190
 Integer Overflow or Wraparound
CVE-2016-10478 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266910 9.8 CRITICAL
Network
qualcomm sd_425_firmware
sd_430_firmware
sd_450_firmware
sd_625_firmware
sd_650_firmware
sd_652_firmware
sd_820_firmware
sd_820a_firmware
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, an unsigned RTIC h… NVD-CWE-noinfo
CVE-2016-10471 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm