Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241931 6.5 警告 CS-Cart - CS-Cart の reward_points.post.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2579 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
241932 6.5 警告 bioscripts - MiniTwitter の index.php における任意のアカウントの特定のオプションを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2574 2012-06-26 16:10 2009-07-22 Show GitHub Exploit DB Packet Storm
241933 6 警告 bioscripts - MiniTwitter における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2573 2012-06-26 16:10 2009-07-22 Show GitHub Exploit DB Packet Storm
241934 7.5 危険 almondsoft
Joomla!		 - Joomla! の aclassf コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2567 2012-06-26 16:10 2009-07-22 Show GitHub Exploit DB Packet Storm
241935 7.5 危険 adminnewstools - Admin News Tools の system/message.php におけるニュースを投稿される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2558 2012-06-26 16:10 2009-07-21 Show GitHub Exploit DB Packet Storm
241936 5 警告 adminnewstools - Admin News Tools の system/download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2557 2012-06-26 16:10 2009-07-21 Show GitHub Exploit DB Packet Storm
241937 5 警告 bistudio - Armed Assault および Armed Assault II におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-2549 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241938 10 危険 bistudio - Armed Assault および Armed Assault II におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2009-2548 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241939 5 警告 bistudio - Armed Assault および Armed Assault II における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2547 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
241940 4.3 警告 AEF Group - AEF におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2546 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268591 8.1 HIGH
Network 		ca service_desk_management
service_desk_manager 		RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10086 2024-11-21 11:43 2017-01-19 Show GitHub Exploit DB Packet Storm
268592 4.3 MEDIUM
Network 		wordpress wordpress The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which allows remote authen… CWE-254
CWE-284
 7PK - Security Features
Improper Access Control 		CVE-2016-10148 2024-11-21 11:43 2017-01-19 Show GitHub Exploit DB Packet Storm
268593 5.5 MEDIUM
Local 		linux linux_kernel crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm… CWE-476
 NULL Pointer Dereference 		CVE-2016-10147 2024-11-21 11:43 2017-01-19 Show GitHub Exploit DB Packet Storm
268594 8.6 HIGH
Network 		ietf ipv6 An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. (The scope of this CVE is all affected IPv6 implementations from all vendors.) The security … CWE-17
Code 		CVE-2016-10142 2024-11-21 11:43 2017-01-14 Show GitHub Exploit DB Packet Storm
268595 9.8 CRITICAL
Network 		artifex mujs An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expres… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-10141 2024-11-21 11:43 2017-01-13 Show GitHub Exploit DB Packet Storm
268596 7.5 HIGH
Network 		zoneminder zoneminder Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthenticated attacker t… CWE-200
Information Exposure 		CVE-2016-10140 2024-11-21 11:43 2017-01-13 Show GitHub Exploit DB Packet Storm
268597 7.8 HIGH
Local 		adups adups_fota An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names involved in the exfiltration are com.adups.fota and com.adups.fota.sysoper. In the com.adups.fota.syso… CWE-310
Cryptographic Issues 		CVE-2016-10139 2024-11-21 11:43 2017-01-13 Show GitHub Exploit DB Packet Storm
268598 7.8 HIGH
Local 		adups adups_fota An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software. The com.adups.fota.sysoper app is installed as a system app and cannot be disabled by the user. In the c… CWE-310
Cryptographic Issues 		CVE-2016-10138 2024-11-21 11:43 2017-01-13 Show GitHub Exploit DB Packet Storm
268599 7.8 HIGH
Local 		adups adups_fota An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sys… CWE-310
Cryptographic Issues 		CVE-2016-10137 2024-11-21 11:43 2017-01-13 Show GitHub Exploit DB Packet Storm
268600 7.8 HIGH
Local 		adups adups_fota An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sys… CWE-310
Cryptographic Issues 		CVE-2016-10136 2024-11-21 11:43 2017-01-13 Show GitHub Exploit DB Packet Storm