Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242251 4.3 警告 avatic - Aardvark Topsites の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2302 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
242252 5 警告 artofdefence
Apache Software Foundation		 - Apache HTTP Server の Artofdefence Hyperguard WAF におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2299 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
242253 7.5 危険 dillo - Dillo の Png_datainfo_callback 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2294 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
242254 6.8 警告 Drupal
chad phillips		 - Drupal のモジュールの LoginToboggan におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2291 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
242255 4.3 警告 arcadetradescript - Arcade Trade Script の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2289 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
242256 7.5 危険 PunBB
biglle		 - PunBB 用の Vote For Us Extension の voteforus.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2276 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
242257 5 警告 cPanel - cPanel の frontend/x3/stats/lastvisit.html におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2275 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
242258 6.8 警告 DesDev Inc. - dedecms の member/uploads_edit.php における任意のファイルを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2270 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
242259 7.5 危険 awesomephp - Awesome PHP Mega File Manager の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2263 2012-06-26 16:10 2009-06-30 Show GitHub Exploit DB Packet Storm
242260 9.3 危険 giorgio tani - Windows 上の PeaZIP における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2261 2012-06-26 16:10 2009-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266851 8.8 HIGH
Network 		sil
mozilla
oracle
suse
opensuse 		graphite2
firefox
linux
linux_enterprise
leap
opensuse 		The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of ser… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2792 2024-11-21 11:48 2016-03-14 Show GitHub Exploit DB Packet Storm
266852 8.8 HIGH
Network 		suse
opensuse
mozilla
oracle
sil 		linux_enterprise
leap
opensuse
firefox
linux
graphite2 		The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (bu… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2791 2024-11-21 11:48 2016-03-14 Show GitHub Exploit DB Packet Storm
266853 8.8 HIGH
Network 		suse
opensuse
mozilla
sil
oracle 		linux_enterprise
leap
opensuse
firefox
graphite2
linux 		The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data s… CWE-19
 Data Processing Errors 		CVE-2016-2790 2024-11-21 11:48 2016-03-14 Show GitHub Exploit DB Packet Storm
266854 5.9 MEDIUM
Network 		isc
debian
canonical 		dhcp
debian_linux
ubuntu_linux 		ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertio… CWE-20
 Improper Input Validation  		CVE-2016-2774 2024-11-21 11:48 2016-03-10 Show GitHub Exploit DB Packet Storm
266855 5.3 MEDIUM
Network 		google chrome The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remo… CWE-200
Information Exposure 		CVE-2016-2845 2024-11-21 11:48 2016-03-6 Show GitHub Exploit DB Packet Storm
266856 8.8 HIGH
Network 		google chrome WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly determine when anonymous block wrappers may exist, which allows remote attackers to… CWE-20
 Improper Input Validation  		CVE-2016-2844 2024-11-21 11:48 2016-03-6 Show GitHub Exploit DB Packet Storm
266857 9.8 CRITICAL
Network 		google chrome
v8 		Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause a denial of service or possibly have other impact via unkno… NVD-CWE-noinfo
CVE-2016-2843 2024-11-21 11:48 2016-03-6 Show GitHub Exploit DB Packet Storm
266858 5.3 MEDIUM
Network 		moxa ioadmin_firmware
iologik_firmware 		Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via un… CWE-255
Credentials Management 		CVE-2016-2283 2024-11-21 11:48 2016-03-5 Show GitHub Exploit DB Packet Storm
266859 5.3 MEDIUM
Network 		moxa ioadmin_firmware
iologik_firmware 		Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext… CWE-255
Credentials Management 		CVE-2016-2282 2024-11-21 11:48 2016-03-5 Show GitHub Exploit DB Packet Storm
266860 5.9 MEDIUM
Network 		hp futuresmart_firmware HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure 		CVE-2016-2244 2024-11-21 11:48 2016-03-5 Show GitHub Exploit DB Packet Storm