Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241881	7.5	危険	2fly	-	2FLY Gift Delivery System の 2fly_gift.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2915	2012-06-26 16:10	2009-08-21	Show	GitHub Exploit DB Packet Storm

241882	7.5	危険	clone2009	-	Ebay Clone における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2894	2012-06-26 16:10	2009-08-20	Show	GitHub Exploit DB Packet Storm

241883	6.8	警告	arabless	-	SaphpLesson の admin/login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2883	2012-06-26 16:10	2009-08-20	Show	GitHub Exploit DB Packet Storm

241884	4.3	警告	datingpro	-	PG MatchMaking におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2882	2012-06-26 16:10	2009-08-20	Show	GitHub Exploit DB Packet Storm

241885	7.5	危険	artis.imag	-	Basilic における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2881	2012-06-26 16:10	2009-08-20	Show	GitHub Exploit DB Packet Storm

241886	7.3	危険	シスコシステムズ	-	Cisco Aironet Lightweight Access Point などの OTAP 機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2861	2012-06-26 16:10	2009-08-25	Show	GitHub Exploit DB Packet Storm

241887	4.3	警告	classifiedphpscript	-	PHP Open Classifieds Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2785	2012-06-26 16:10	2009-08-17	Show	GitHub Exploit DB Packet Storm

241888	7.5	危険	garagesalesjunkie	-	GarageSales Script の visitor/view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2777	2012-06-26 16:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

241889	4.3	警告	freearcadescript	-	Free Arcade Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2771	2012-06-26 16:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

241890	7.5	危険	dd-wrt	-	DD-WRT 24 sp1 の管理 GUI の httpd の httpd.c における設定を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2766	2012-06-26 16:10	2009-07-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266931	8.8	HIGH Network	ntt-west ntt-east	pr-400mi_firmware pr-400mi rt-400mi_firmware rv-440mi_firmware	Cross-site request forgery (CSRF) vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware …	CWE-352 Origin Validation Error	CVE-2016-1228	2024-11-21 11:45	2016-07-3	Show	GitHub Exploit DB Packet Storm

266932	7.2	HIGH Network	ntt-east ntt-west	rt-400mi_firmware pr-400mi_firmware rv-440mi_firmware	NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and ear…	NVD-CWE-noinfo	CVE-2016-1227	2024-11-21 11:45	2016-07-3	Show	GitHub Exploit DB Packet Storm

266933	7.5	HIGH Network	cybozu	garoon	Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors.	CWE-200 Information Exposure	CVE-2016-1193	2024-11-21 11:45	2016-06-26	Show	GitHub Exploit DB Packet Storm

266934	6.5	MEDIUM Network	cybozu	garoon	Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.	CWE-284 Improper Access Control	CVE-2016-1190	2024-11-21 11:45	2016-06-26	Show	GitHub Exploit DB Packet Storm

266935	8.1	HIGH Network	cybozu	garoon	Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-1189	2024-11-21 11:45	2016-06-26	Show	GitHub Exploit DB Packet Storm

266936	6.5	MEDIUM Network	cybozu	garoon	Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-1188	2024-11-21 11:45	2016-06-26	Show	GitHub Exploit DB Packet Storm

266937	4.3	MEDIUM Network	cybozu	garoon	Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerabilit…	CWE-264 CWE-200 Permissions, Privileges, and Access Controls Information Exposure	CVE-2016-1196	2024-11-21 11:45	2016-06-20	Show	GitHub Exploit DB Packet Storm

266938	4.3	MEDIUM Network	cybozu	garoon	Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors.	CWE-22 CWE-200 Path Traversal Information Exposure	CVE-2016-1192	2024-11-21 11:45	2016-06-20	Show	GitHub Exploit DB Packet Storm

266939	5.3	MEDIUM Network	cybozu	garoon	Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors.	CWE-22 Path Traversal	CVE-2016-1191	2024-11-21 11:45	2016-06-20	Show	GitHub Exploit DB Packet Storm

266940	6.1	MEDIUM Network	trendmicro	internet_security	Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2016-1226	2024-11-21 11:45	2016-06-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed