Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242121 7.8 危険 シスコシステムズ - Cisco Aironet Lightweight AP におけるアクセスポイント設定の詳細を発見される脆弱性 CWE-310
暗号の問題 		CVE-2009-2976 2012-06-26 16:18 2009-08-27 Show GitHub Exploit DB Packet Storm
242122 9.3 危険 Baidu, Inc.
uitv		 - UiTV UiPlaye の ActiveX コントロール におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2970 2012-06-26 16:18 2009-10-19 Show GitHub Exploit DB Packet Storm
242123 4.3 警告 buildbot - Buildbot におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2967 2012-06-26 16:10 2009-08-26 Show GitHub Exploit DB Packet Storm
242124 9.3 危険 decomputeur - Toolbar Uninstaller の update 機能におけるダウンロードおよび任意のファイルの実行を強制される脆弱性 CWE-noinfo
情報不足 		CVE-2009-2963 2012-06-26 16:10 2009-08-25 Show GitHub Exploit DB Packet Storm
242125 7.5 危険 cuteflow - CuteFlow におけるユーザ名を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2960 2012-06-26 16:10 2009-08-25 Show GitHub Exploit DB Packet Storm
242126 4.3 警告 buildbot - Buildbot の status/web/waterfall.py におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2959 2012-06-26 16:10 2009-08-25 Show GitHub Exploit DB Packet Storm
242127 9.3 危険 Debian
Devscripts Devel Team		 - devscripts の scripts/uscan.pl における Perl コードを実行される脆弱性 CWE-Other
その他 		CVE-2009-2946 2012-06-26 16:10 2009-02-14 Show GitHub Exploit DB Packet Storm
242128 4.3 警告 elkagroup - elka CMS の Search 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2930 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
242129 7.5 危険 digitalspinners - DigitalSpinners DS CMS の DetailFile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2927 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
242130 7.8 危険 djcalendar - DJCalendar の DJcalendar.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2925 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266911 5.4 MEDIUM
Network 		apache guacamole Cross-site scripting (XSS) vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote authenticated users to i… CWE-79
Cross-site Scripting 		CVE-2016-1566 2024-11-21 11:46 2017-02-3 Show GitHub Exploit DB Packet Storm
266912 8.8 HIGH
Network 		snort snort Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is located in the same… CWE-426
 Untrusted Search Path 		CVE-2016-1417 2024-11-21 11:46 2017-01-24 Show GitHub Exploit DB Packet Storm
266913 7.8 HIGH
Local 		idrix truecrypt
veracrypt 		Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrato… CWE-426
 Untrusted Search Path 		CVE-2016-1281 2024-11-21 11:46 2017-01-24 Show GitHub Exploit DB Packet Storm
266914 3.7 LOW
Network 		ntp
ntpsec 		ntp
ntpsec 		ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference cloc… CWE-254
 7PK - Security Features 		CVE-2016-1551 2024-11-21 11:46 2017-01-28 Show GitHub Exploit DB Packet Storm
266915 5.3 MEDIUM
Network 		ntp ntp An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted … CWE-200
Information Exposure 		CVE-2016-1550 2024-11-21 11:46 2017-01-7 Show GitHub Exploit DB Packet Storm
266916 6.5 MEDIUM
Network 		ntp ntp A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a… CWE-19
 Data Processing Errors 		CVE-2016-1549 2024-11-21 11:46 2017-01-7 Show GitHub Exploit DB Packet Storm
266917 7.2 HIGH
Network 		ntp ntp An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p… CWE-19
 Data Processing Errors 		CVE-2016-1548 2024-11-21 11:46 2017-01-7 Show GitHub Exploit DB Packet Storm
266918 5.3 MEDIUM
Network 		ntp ntp An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a vi… CWE-20
 Improper Input Validation  		CVE-2016-1547 2024-11-21 11:46 2017-01-7 Show GitHub Exploit DB Packet Storm
266919 5.9 MEDIUM
Network 		cisco content_security_management_appliance
email_security_appliance
web_security_appliance 		A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management Security Appliance (SM… CWE-310
Cryptographic Issues 		CVE-2016-1411 2024-11-21 11:46 2016-12-14 Show GitHub Exploit DB Packet Storm
266920 8.1 HIGH
Network 		dbd-mysql_project dbd-mysql There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare… CWE-416
 Use After Free 		CVE-2016-1251 2024-11-21 11:46 2016-11-30 Show GitHub Exploit DB Packet Storm