Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 12:06 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242181 6.8 警告 ermenegildo fiorito - Irmin CMS の includes/template-loader.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7254 2012-06-26 16:10 2010-04-7 Show GitHub Exploit DB Packet Storm
242182 7.5 危険 goople cms - Goople CMS の frontpage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0121 2012-06-26 16:10 2009-01-14 Show GitHub Exploit DB Packet Storm
242183 6.8 警告 expinion - PollPro の admin/agent_edit.asp におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-0112 2012-06-26 16:10 2009-01-9 Show GitHub Exploit DB Packet Storm
242184 7.5 危険 goople cms - Goople CMS の frontpage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0111 2012-06-26 16:10 2009-01-9 Show GitHub Exploit DB Packet Storm
242185 6.8 警告 freedesktop.org
Mozilla Foundation		 - xdg-open における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0068 2012-06-26 16:10 2009-01-3 Show GitHub Exploit DB Packet Storm
242186 5.5 警告 ネットギア
Atheros		 - Atheros AR9160-BC1A チップセット上の Netgear WNDAP330 Wi-Fi アクセスポイントなどで使用される Atheros 無線ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-0052 2012-06-26 16:10 2009-11-12 Show GitHub Exploit DB Packet Storm
242187 5 警告 eid - eidlib における証明書チェーンの検証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-0049 2012-06-26 16:10 2009-01-7 Show GitHub Exploit DB Packet Storm
242188 5 警告 gale - Gale における証明書チェーンの検証を回避される脆弱性 CWE-287
CWE-310
CVE-2009-0047 2012-06-26 16:10 2009-01-7 Show GitHub Exploit DB Packet Storm
242189 6.8 警告 Apache Software Foundation - Apache Geronimo Application Server の Web 管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-0039 2012-06-26 16:10 2009-04-17 Show GitHub Exploit DB Packet Storm
242190 4.3 警告 Apache Software Foundation - Apache Geronimo Application Server の Web 管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0038 2012-06-26 16:10 2009-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267211 7.5 HIGH
Network 		cpanel cpanel cPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104). CWE-287
Improper Authentication 		CVE-2016-10833 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
267212 6.5 MEDIUM
Network 		cpanel cpanel cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102). CWE-287
Improper Authentication 		CVE-2016-10832 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
267213 7.2 HIGH
Network 		cpanel cpanel cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account (SEC-101). CWE-287
Improper Authentication 		CVE-2016-10831 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
267214 8.1 HIGH
Network 		cpanel cpanel cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100). CWE-284
Improper Access Control 		CVE-2016-10830 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
267215 6.5 MEDIUM
Network 		cpanel cpanel cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99). CWE-552
 Files or Directories Accessible to External Parties 		CVE-2016-10829 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
267216 8.8 HIGH
Network 		cpanel cpanel cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97). CWE-22
Path Traversal 		CVE-2016-10828 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
267217 5.4 MEDIUM
Network 		cpanel cpanel cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96). CWE-79
Cross-site Scripting 		CVE-2016-10827 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
267218 8.1 HIGH
Network 		cpanel cpanel cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92). CWE-358
 Improperly Implemented Security Check for Standard 		CVE-2016-10825 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
267219 9.8 CRITICAL
Network 		cpanel cpanel cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90). CWE-20
 Improper Input Validation  		CVE-2016-10824 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
267220 8.8 HIGH
Network 		cpanel cpanel cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89). CWE-20
 Improper Input Validation  		CVE-2016-10823 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm