Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242241 5 警告 andrew j.korty - USE=ssh でコンパイルされた PAM で使用される pam_ssh におけるユーザ名が列挙される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-1273 2012-06-26 16:10 2009-04-8 Show GitHub Exploit DB Packet Storm
242242 7.5 危険 alikonweb
Joomla!		 - Joomla! の bookjoomlas コンポーネントの sub_commententry.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1263 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
242243 7.2 危険 フォーティネット - Fortinet FortiClient におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2009-1262 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
242244 9.3 危険 EZB Systems - UltraISO におけるスタックベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1260 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
242245 7.5 危険 FlexCMS - FlexCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1256 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
242246 4.3 警告 Drupal - Drupal 用の Feed 要素マッパーモジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1249 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
242247 7.5 危険 acutecp - Acute Control Panel における任意の PHP コードが実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1248 2012-06-26 16:10 2009-04-6 Show GitHub Exploit DB Packet Storm
242248 7.5 危険 acutecp.rediscussed - Acute Control Panel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1247 2012-06-26 16:10 2009-04-6 Show GitHub Exploit DB Packet Storm
242249 7.5 危険 blogplus - Blogplus におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1246 2012-06-26 16:10 2009-04-6 Show GitHub Exploit DB Packet Storm
242250 7.5 危険 cccp-common-clan-portal-pasterbin - CCCP Community Clan Portal Pastebin の insert_to_pastebin 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1245 2012-06-26 16:10 2009-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268351 8.8 HIGH
Adjacent 		openvswitch openvswitch In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extrac… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10377 2024-11-21 11:43 2017-05-29 Show GitHub Exploit DB Packet Storm
268352 4.5 MEDIUM
Network 		gajim gajim Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypte… CWE-310
Cryptographic Issues 		CVE-2016-10376 2024-11-21 11:43 2017-05-28 Show GitHub Exploit DB Packet Storm
268353 9.8 CRITICAL
Network 		yodl_project yodl Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10375 2024-11-21 11:43 2017-05-27 Show GitHub Exploit DB Packet Storm
268354 7.5 HIGH
Network 		vanillaforums vanilla The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a cr… CWE-200
Information Exposure 		CVE-2016-10073 2024-11-21 11:43 2017-05-23 Show GitHub Exploit DB Packet Storm
268355 5.5 MEDIUM
Local 		perltidy_project perltidy perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protect… CWE-59
Link Following 		CVE-2016-10374 2024-11-21 11:43 2017-05-18 Show GitHub Exploit DB Packet Storm
268356 9.8 CRITICAL
Network 		eir d1000_modem_firmware The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547, as demonstrated by opening WAN access to TCP port 80… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10372 2024-11-21 11:43 2017-05-16 Show GitHub Exploit DB Packet Storm
268357 7.0 HIGH
Local 		google android A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel. CWE-362
Race Condition 		CVE-2016-10242 2024-11-21 11:43 2017-05-16 Show GitHub Exploit DB Packet Storm
268358 7.8 HIGH
Local 		google android In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a … CWE-119
CWE-190
Incorrect Access of Indexable Resource ('Range Error') 
 Integer Overflow or Wraparound 		CVE-2016-10239 2024-11-21 11:43 2017-05-16 Show GitHub Exploit DB Packet Storm
268359 7.8 HIGH
Local 		google android In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10238 2024-11-21 11:43 2017-05-16 Show GitHub Exploit DB Packet Storm
268360 7.8 HIGH
Local 		google android If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not … CWE-284
Improper Access Control 		CVE-2016-10237 2024-11-21 11:43 2017-05-16 Show GitHub Exploit DB Packet Storm