Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241921	7.5	危険	ed charkow	-	Ed Charkow SuperCharged Linking の browse.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3967	2012-06-26 16:18	2009-11-18	Show	GitHub Exploit DB Packet Storm

241922	7.5	危険	arcadetradescript	-	Arcade Trade Script における管理者権限を取得される脆弱性	CWE-287 不適切な認証	CVE-2009-3966	2012-06-26 16:18	2009-11-18	Show	GitHub Exploit DB Packet Storm

241923	7.8	危険	2wire	-	複数の 2wire 製品の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-3962	2012-06-26 16:18	2009-11-17	Show	GitHub Exploit DB Packet Storm

241924	4.3	警告	bract	-	Bractus SunTrack におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3950	2012-06-26 16:18	2009-11-16	Show	GitHub Exploit DB Packet Storm

241925	4.3	警告	JetAudio	-	JetAudio の COWON Media Center におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3948	2012-06-26 16:18	2009-11-16	Show	GitHub Exploit DB Packet Storm

241926	5.8	警告	シトリックス・システムズ	-	Citrix Online プラグインなどの製品における SSL/TLS サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3936	2012-06-26 16:18	2009-11-9	Show	GitHub Exploit DB Packet Storm

241927	9.3	危険	file project	-	Christos Zoulas の file における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3930	2012-06-26 16:18	2009-11-10	Show	GitHub Exploit DB Packet Storm

241928	6.8	警告	Drupal chad phillips	-	Drupal のモジュールの User Protect モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-3922	2012-06-26 16:18	2009-11-9	Show	GitHub Exploit DB Packet Storm

241929	4	警告	Ezra Barnett Gildesgame Drupal	-	Drupal の Smartqueue_og モジュールにおける任意の基本的なグループ名を発見される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3921	2012-06-26 16:18	2009-11-4	Show	GitHub Exploit DB Packet Storm

241930	4.3	警告	Drupal greg knaddison	-	S5 Presentation Player モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3917	2012-06-26 16:18	2009-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268451	7.5	HIGH Network	imagemagick	imagemagick	Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors.	CWE-399 Resource Management Errors	CVE-2016-10146	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

268452	9.8	CRITICAL Network	imagemagick	imagemagick	Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy.	CWE-189 Numeric Errors	CVE-2016-10145	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

268453	9.8	CRITICAL Network	imagemagick	imagemagick	coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check.	CWE-284 Improper Access Control	CVE-2016-10144	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

268454	9.8	CRITICAL Network	artifex	mujs	Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by leveraging an error when dropping extra arguments …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-10133	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

268455	7.5	HIGH Network	artifex fedoraproject	mujs fedora	regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to regular expression compilation.	CWE-476 NULL Pointer Dereference	CVE-2016-10132	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

268456	5.9	MEDIUM Network	libgit2_project	libgit2	The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variabl…	CWE-284 Improper Access Control	CVE-2016-10130	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

268457	7.5	HIGH Network	libgit2_project	libgit2	The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line.	CWE-476 NULL Pointer Dereference	CVE-2016-10129	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

268458	9.8	CRITICAL Network	libgit2_project	libgit2	Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspec…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-10128	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

268459	7.5	HIGH Network	pysaml2_project debian	pysaml2 debian_linux	XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.	CWE-611 XXE	CVE-2016-10149	2024-11-21 11:43	2017-03-24	Show	GitHub Exploit DB Packet Storm

268460	7.8	HIGH Local	imagemagick	imagemagick	Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified other impact via a crafted TIFF file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-10059	2024-11-21 11:43	2017-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed