Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242271	5	警告	ASP indir	-	UranyumSoft Listing Service におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4585	2012-06-26 16:19	2010-01-6	Show	GitHub Exploit DB Packet Storm

242272	7.5	危険	dbmasters	-	dB Masters Multimedia Links Directory の admin.php における管理者アクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2009-4584	2012-06-26 16:19	2010-01-6	Show	GitHub Exploit DB Packet Storm

242273	4.3	警告	FacileForms Joomla! Mambo Foundation	-	Mambo および Joomla! 用の Facileforms コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4578	2012-06-26 16:19	2010-01-6	Show	GitHub Exploit DB Packet Storm

242274	4.3	警告	Drupal	-	Drupal 用の Randomizer モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4602	2012-06-26 16:19	2009-12-9	Show	GitHub Exploit DB Packet Storm

242275	7.5	危険	cmstactics Joomla!	-	Joomla! の beeheard コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4576	2012-06-26 16:19	2010-01-6	Show	GitHub Exploit DB Packet Storm

242276	7.5	危険	elkagroup	-	elkagroup Image Gallery における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4569	2012-06-26 16:19	2010-01-5	Show	GitHub Exploit DB Packet Storm

242277	4.3	警告	Snitz	-	Snitz Forums 2000 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4554	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242278	9.3	危険	cdmi	-	A2 Media Player Pro におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4549	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242279	4.3	警告	cromosoft	-	Cromosoft Technologies Facil Helpdesk Lite の kbase/kbase.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4544	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242280	6.8	警告	cromosoft	-	Cromosoft Technologies Facil Helpdesk Lite の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-4543	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266891	8.8	HIGH Network	huawei	policy_center_firmware	Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to gain privileges and cause a denial of service (system crash) via a crafted URL.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2405	2024-11-21 11:48	2016-04-13	Show	GitHub Exploit DB Packet Storm

266892	8.4	HIGH Local	nvidia	gpu_driver_r340 gpu_driver_r352	The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information, cause a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2558	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

266893	8.4	HIGH Local	nvidia	gpu_driver_r340 gpu_driver_r352	The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information from ker…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2557	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

266894	7.8	HIGH Local	nvidia	gpu_driver_r340 gpu_driver_r352	The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows improperly allows access to restricted functionality, which…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2556	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

266895	8.4	HIGH Local	qemu canonical debian redhat	qemu ubuntu_linux debian_linux openstack virtualization enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise…	The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2857	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

266896	9.8	CRITICAL Network	debian kamailio	debian_linux kamailio	Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memo…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2385	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

266897	7.5	HIGH Network	postgresql	postgresql	PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that pe…	CWE-254 7PK - Security Features	CVE-2016-2193	2024-11-21 11:48	2016-04-12	Show	GitHub Exploit DB Packet Storm

266898	7.8	HIGH Local	lenovo	fingerprint_manager touch_fingerprint	Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating lo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2393	2024-11-21 11:48	2016-04-11	Show	GitHub Exploit DB Packet Storm

266899	3.1	LOW Network	djangoproject	django	The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.	CWE-200 Information Exposure	CVE-2016-2513	2024-11-21 11:48	2016-04-9	Show	GitHub Exploit DB Packet Storm

266900	7.4	HIGH Network	djangoproject	django	The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cr…	CWE-79 Cross-site Scripting	CVE-2016-2512	2024-11-21 11:48	2016-04-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed