Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242301 7.5 危険 elvinbts - Elvin における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2123 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
242302 4.3 警告 F5 Networks - F5 FirePass SSL VPN のログインインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2119 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
242303 7.5 危険 daan sprenkels - FretsWeb における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2113 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
242304 7.5 危険 frank-karau - phpFK の include/page_bottom.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2112 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
242305 5 警告 daan sprenkels - FretsWeb におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2109 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
242306 7.5 危険 com jumi
Joomla!		 - Joomla の jumi コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2102 2012-06-26 16:10 2009-06-17 Show GitHub Exploit DB Packet Storm
242307 6.8 警告 castro xl - TorrentVolve の archive.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2101 2012-06-26 16:10 2009-06-17 Show GitHub Exploit DB Packet Storm
242308 7.5 危険 david degner - phpCollegeExchange の house/listing_view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2096 2012-06-26 16:10 2009-06-17 Show GitHub Exploit DB Packet Storm
242309 7.5 危険 creative web solutions - Creative Web Solutions Multi-Level CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2082 2012-06-26 16:10 2009-06-16 Show GitHub Exploit DB Packet Storm
242310 3.5 注意 Drupal - Drupal 用の Taxonomy manager モジュールの管理ページインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2079 2012-06-26 16:10 2009-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268521 8.1 HIGH
Network 		strider-sauce_project strider-sauce strider-sauce is Sauce Labs / Selenium support for Strider. strider-sauce downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code exe… CWE-310
Cryptographic Issues 		CVE-2016-10611 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268522 8.1 HIGH
Network 		uxebu webdrvr webdrvr is a npm wrapper for Selenium Webdriver including Chromedriver / IEDriver / IOSDriver / Ghostdriver. webdrvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. … CWE-310
Cryptographic Issues 		CVE-2016-10601 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268523 8.1 HIGH
Network 		interactivebrokers ibapi ibapi is an Interactive Brokers API addon for NodeJS. ibapi downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. Before 2.5.6, it may be possible to cause remote code exe… CWE-310
Cryptographic Issues 		CVE-2016-10593 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268524 8.1 HIGH
Network 		prince_project prince Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince(1) CLI. prince downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to… CWE-310
Cryptographic Issues 		CVE-2016-10591 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268525 8.1 HIGH
Network 		cue-sdk-node_project cue-sdk-node cue-sdk-node is a Corsair Cue SDK wrapper for node.js. cue-sdk-node downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution… CWE-310
Cryptographic Issues 		CVE-2016-10590 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268526 8.1 HIGH
Network 		spunjs selenium-binaries selenium-binaries downloads Selenium related binaries for your OS. selenium-binaries downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remo… CWE-310
Cryptographic Issues 		CVE-2016-10589 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268527 8.1 HIGH
Network 		macacajs macaca-chromedriver macaca-chromedriver is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver before 1.0.29 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be p… CWE-310
Cryptographic Issues 		CVE-2016-10586 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268528 8.1 HIGH
Network 		dalekjs dalekjs dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possib… CWE-310
Cryptographic Issues 		CVE-2016-10584 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268529 8.1 HIGH
Network 		unicode_project unicode unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. CWE-310
Cryptographic Issues 		CVE-2016-10578 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm
268530 8.1 HIGH
Network 		ibm ibm_db ibm_db is an asynchronous/synchronous interface for node.js to IBM DB2 and IBM Informix. ibm_db before 1.0.2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may b… CWE-310
Cryptographic Issues 		CVE-2016-10577 2024-11-21 11:44 2018-05-30 Show GitHub Exploit DB Packet Storm