Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242221 5 警告 gizmo5 - Linux 上の Gizmo における任意のユーザの資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2381 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
242222 4.3 警告 4homepages - 4images の includes/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2380 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
242223 6.8 警告 BIGACE - BIGACE Web CMS の public/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2379 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
242224 4.3 警告 avax-software - AVAX-software Avax Vector ActiveX の Avax Vector ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2377 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
242225 7.5 危険 datachecknh - DataCheck Solutions ForumPal FE および ForumPal の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2366 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
242226 7.5 危険 datachecknh - DataCheck Solutions GalleryPal FE の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2365 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
242227 9.3 危険 dan cahill - NullLogic Groupware の pgsqlQuery 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2356 2012-06-26 16:10 2009-07-7 Show GitHub Exploit DB Packet Storm
242228 6.8 警告 eaccelerator - eAccelerator の encoder.php における 任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2353 2012-06-26 16:10 2009-07-7 Show GitHub Exploit DB Packet Storm
242229 7.8 危険 Digium - Asterisk Open Source の IAX2 プロトコル実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-2346 2012-06-26 16:10 2009-09-8 Show GitHub Exploit DB Packet Storm
242230 7.5 危険 csphere - ClanSphere における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2345 2012-06-26 16:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266941 7.2 HIGH
Network 		apache ranger SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/… CWE-89
SQL Injection 		CVE-2016-2174 2024-11-21 11:47 2016-06-13 Show GitHub Exploit DB Packet Storm
266942 7.8 HIGH
Local 		linux linux_kernel Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attacker… CWE-269
 Improper Privilege Management 		CVE-2016-2066 2024-11-21 11:47 2016-06-13 Show GitHub Exploit DB Packet Storm
266943 7.8 HIGH
Local 		linux linux_kernel Integer signedness error in the MSM V4L2 video driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers… CWE-269
 Improper Privilege Management 		CVE-2016-2061 2024-11-21 11:47 2016-06-13 Show GitHub Exploit DB Packet Storm
266944 7.1 HIGH
Local 		redhat
opensuse
debian
spice_project 		enterprise_linux
enterprise_linux_desktop
enterprise_linux_hpc_node_eus
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise_linux_workstation<… 		SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261. CWE-284
Improper Access Control 		CVE-2016-2150 2024-11-21 11:47 2016-06-10 Show GitHub Exploit DB Packet Storm
266945 8.8 HIGH
Network 		redhat openshift_origin
openshift 		Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2160 2024-11-21 11:47 2016-06-9 Show GitHub Exploit DB Packet Storm
266946 6.5 MEDIUM
Network 		redhat openshift Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace. CWE-200
Information Exposure 		CVE-2016-2149 2024-11-21 11:47 2016-06-9 Show GitHub Exploit DB Packet Storm
266947 5.5 MEDIUM
Local 		redhat openshift Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by re… CWE-200
Information Exposure 		CVE-2016-2142 2024-11-21 11:47 2016-06-9 Show GitHub Exploit DB Packet Storm
266948 6.1 MEDIUM
Network 		vmware vcenter_server Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject ar… CWE-79
Cross-site Scripting 		CVE-2016-2078 2024-11-21 11:47 2016-06-8 Show GitHub Exploit DB Packet Storm
266949 8.1 HIGH
Network 		hp matrix_operating_environment
systems_insight_manager 		HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, … NVD-CWE-noinfo
CVE-2016-2030 2024-11-21 11:47 2016-06-8 Show GitHub Exploit DB Packet Storm
266950 9.1 CRITICAL
Network 		hp systems_insight_manager
matrix_operating_environment 		HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358. NVD-CWE-noinfo
CVE-2016-2029 2024-11-21 11:47 2016-06-8 Show GitHub Exploit DB Packet Storm