Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242011 7.5 危険 bpowerhouse - BPowerHouse BPMusic の music.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3502 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
242012 7.5 危険 bpowerhouse - BPowerHouse BPStudents の students.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3501 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
242013 7.5 危険 bpowerhouse - BPowerHouse BPGames における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3500 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
242014 7.5 危険 bpowerhouse - BPowerHouse BPLawyerCaseDocuments の employee.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3499 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
242015 7.5 危険 gotdns - Loggix Project における PHP リモートファイルインクルーションの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3492 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
242016 9.3 危険 Core FTP - Core FTP におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3484 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
242017 9.3 危険 globalscape - GlobalSCAPE CuteFTP の Create New Site 機能におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3483 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
242018 4.3 警告 Drupal
ron jerome		 - Drupal 用の Biblio モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3479 2012-06-26 16:18 2009-07-29 Show GitHub Exploit DB Packet Storm
242019 5 警告 シスコシステムズ - Cisco AXG などにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-3457 2012-06-26 16:18 2009-09-25 Show GitHub Exploit DB Packet Storm
242020 7.5 危険 アップル - Apple Safari における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-3455 2012-06-26 16:18 2009-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268631 9.8 CRITICAL
Network 		s9y serendipity include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion and a possible Code Execution attack during a first-time installation because it fails to sanitize the… CWE-284
Improper Access Control 		CVE-2016-10082 2024-11-21 11:43 2016-12-30 Show GitHub Exploit DB Packet Storm
268632 7.8 HIGH
Local 		shutter-project shutter /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action. CWE-19
 Data Processing Errors 		CVE-2016-10081 2024-11-21 11:43 2016-12-30 Show GitHub Exploit DB Packet Storm
268633 7.5 HIGH
Local 		wampserver wampserver WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary co… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10072 2024-11-21 11:43 2016-12-27 Show GitHub Exploit DB Packet Storm
268634 7.5 HIGH
Local 		wampserver wampserver WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged l… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10031 2024-11-21 11:43 2016-12-27 Show GitHub Exploit DB Packet Storm
268635 6.1 MEDIUM
Network 		antisamy_project antisamy In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impac… CWE-79
Cross-site Scripting 		CVE-2016-10006 2024-11-21 11:43 2016-12-25 Show GitHub Exploit DB Packet Storm
268636 7.5 HIGH
Network 		sprecher-automation sprecon-e_service_program An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10041 2024-11-21 11:43 2016-12-25 Show GitHub Exploit DB Packet Storm
268637 7.3 HIGH
Network 		modx modx_revolution Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to … CWE-22
Path Traversal 		CVE-2016-10039 2024-11-21 11:43 2016-12-24 Show GitHub Exploit DB Packet Storm
268638 7.3 HIGH
Network 		modx modx_revolution Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to … CWE-22
Path Traversal 		CVE-2016-10038 2024-11-21 11:43 2016-12-24 Show GitHub Exploit DB Packet Storm
268639 7.3 HIGH
Network 		modx modx_revolution Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, re… CWE-22
Path Traversal 		CVE-2016-10037 2024-11-21 11:43 2016-12-24 Show GitHub Exploit DB Packet Storm
268640 7.5 HIGH
Network 		sap solution_manager Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524. CWE-200
Information Exposure 		CVE-2016-10005 2024-11-21 11:43 2016-12-19 Show GitHub Exploit DB Packet Storm