Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242231 6.8 警告 FreeWebshop - FreeWebshop.org の includes/startmodules.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2338 2012-06-26 16:10 2009-07-7 Show GitHub Exploit DB Packet Storm
242232 7.5 危険 cms.tut.su - CMS Chainuk におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2333 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
242233 5 警告 cms.tut.su - CMS Chainuk における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-2332 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
242234 7.5 危険 cms.tut.su - CMS Chainuk における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2331 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
242235 4.3 警告 cms.tut.su - CMS Chainuk の admin/admin_menu.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2330 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
242236 5 警告 clicknet - Clicknet CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2325 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
242237 4.3 警告 CKEditor Team - FCKeditor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2324 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
242238 5.8 警告 Axesstel - Axesstel MV の Web インターフェースにおけるクロスサイトリクエストフォージェリの検出を回避される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2323 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
242239 4.3 警告 Axesstel - Axesstel MV の cgi-bin/sysconf.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2322 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
242240 7.8 危険 Axesstel - Axesstel MV の cgi-bin/sysconf.cgi におけるサービス運用妨害 (設定リセット) 状態となる脆弱性 CWE-Other
その他 		CVE-2009-2321 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268481 7.5 HIGH
Network 		debian
libevent_project 		debian_linux
libevent 		The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname. CWE-125
Out-of-bounds Read 		CVE-2016-10197 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
268482 7.5 HIGH
Network 		debian
libevent_project
mozilla 		debian_linux
libevent
thunderbird
firefox
firefox_esr 		Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involvi… CWE-787
 Out-of-bounds Write 		CVE-2016-10196 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
268483 9.8 CRITICAL
Network 		libevent_project
debian 		libevent
debian_linux 		The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack… CWE-125
Out-of-bounds Read 		CVE-2016-10195 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
268484 7.8 HIGH
Local 		libgd libgd Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks i… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-10168 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
268485 5.5 MEDIUM
Local 		libgd libgd The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file. CWE-20
 Improper Input Validation  		CVE-2016-10167 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
268486 9.8 CRITICAL
Network 		libgd libgd Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors relate… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2016-10166 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
268487 6.5 MEDIUM
Local 		virglrenderer_project virglrenderer Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) b… CWE-399
 Resource Management Errors 		CVE-2016-10163 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
268488 6.0 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2016-10155 2024-11-21 11:43 2017-03-16 Show GitHub Exploit DB Packet Storm
268489 7.8 HIGH
Local 		jasper_project jasper Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-10251 2024-11-21 11:43 2017-03-15 Show GitHub Exploit DB Packet Storm
268490 7.5 HIGH
Network 		jasper_project jasper The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on… CWE-476
 NULL Pointer Dereference 		CVE-2016-10250 2024-11-21 11:43 2017-03-15 Show GitHub Exploit DB Packet Storm