Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241781 9.3 危険 FFmpeg - FFmpeg の VP3 デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-4631 2012-06-26 16:19 2010-02-9 Show GitHub Exploit DB Packet Storm
241782 5 警告 dan brown - Moa Gallery の sources/_template_parser.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4627 2012-06-26 16:19 2010-01-18 Show GitHub Exploit DB Packet Storm
241783 7.5 危険 dan brown - Moa Gallery における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4614 2012-06-26 16:19 2010-01-18 Show GitHub Exploit DB Packet Storm
241784 7.5 危険 fernando soares
Joomla!		 - Joomla! 用 Fernando Soares Mamboleto コンポーネントの mamboleto.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4604 2012-06-26 16:19 2010-01-12 Show GitHub Exploit DB Packet Storm
241785 7.5 危険 corephp
Joomla!		 - Joomla! の jphoto コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4598 2012-06-26 16:19 2010-01-12 Show GitHub Exploit DB Packet Storm
241786 9.3 危険 awingsoft - AwingSoft Awakening Web3D Player などの WindsPlayerIE.View.1 ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4588 2012-06-26 16:19 2010-01-7 Show GitHub Exploit DB Packet Storm
241787 5 警告 Cherokee Project - Cherokee Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4587 2012-06-26 16:19 2010-01-7 Show GitHub Exploit DB Packet Storm
241788 5 警告 ASP indir - UranyumSoft Listing Service におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4585 2012-06-26 16:19 2010-01-6 Show GitHub Exploit DB Packet Storm
241789 7.5 危険 dbmasters - dB Masters Multimedia Links Directory の admin.php における管理者アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-4584 2012-06-26 16:19 2010-01-6 Show GitHub Exploit DB Packet Storm
241790 4.3 警告 FacileForms
Joomla!
Mambo Foundation		 - Mambo および Joomla! 用の Facileforms コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4578 2012-06-26 16:19 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268751 6.7 MEDIUM
Local 		emc avamar_server Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges by leveraging admin access and entering a sudo command. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0905 2024-11-21 11:42 2016-09-21 Show GitHub Exploit DB Packet Storm
268752 8.6 HIGH
Network 		emc avamar_server Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which allows remote attackers to … CWE-310
CWE-200
Cryptographic Issues
Information Exposure 		CVE-2016-0904 2024-11-21 11:42 2016-09-21 Show GitHub Exploit DB Packet Storm
268753 9.1 CRITICAL
Network 		emc avamar_server Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data … CWE-200
Information Exposure 		CVE-2016-0903 2024-11-21 11:42 2016-09-21 Show GitHub Exploit DB Packet Storm
268754 5.3 MEDIUM
Network 		trane tracer_sc The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request. CWE-200
Information Exposure 		CVE-2016-0870 2024-11-21 11:42 2016-09-19 Show GitHub Exploit DB Packet Storm
268755 9.8 CRITICAL
Network 		pivotal operations_manager Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH … CWE-362
Race Condition 		CVE-2016-0930 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
268756 7.5 HIGH
Network 		pivotal_software rabbitmq The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4 logs command lines of failed commands, which might allow context-dependent attackers to obtain sensitiv… CWE-200
Information Exposure 		CVE-2016-0929 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
268757 7.4 HIGH
Network 		pivotal cloud_foundry_elastic_runtime Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct … CWE-601
Open Redirect 		CVE-2016-0928 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
268758 6.1 MEDIUM
Network 		pivotal_software cloud_foundry_elastic_runtime Cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2016-0927 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
268759 6.1 MEDIUM
Network 		pivotal_software cloud_foundry_elastic_runtime Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.32 and 1.7.x before 1.7.8 allows remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting 		CVE-2016-0926 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm
268760 7.5 HIGH
Network 		dell bsafe The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm list transmitted to a server, which makes … CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2016-0923 2024-11-21 11:42 2016-09-18 Show GitHub Exploit DB Packet Storm