Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242311 4.3 警告 aditus - Aditus Consulting JpGraph の GetURLArguments 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4422 2012-06-26 16:18 2009-12-24 Show GitHub Exploit DB Packet Storm
242312 6.5 警告 Alexander Palmo - Simple PHP Blog の languages_cgi.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4421 2012-06-26 16:18 2009-12-24 Show GitHub Exploit DB Packet Storm
242313 7.5 危険 edgewall - Trac における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-4405 2012-06-26 16:18 2009-12-23 Show GitHub Exploit DB Packet Storm
242314 7.5 危険 daniel ptzinger
TYPO3 Association		 - TYPO3 用の Document Directorys 拡張機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4393 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
242315 4.3 警告 daniel regelein
TYPO3 Association		 - TYPO3 用の File list 拡張機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4391 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
242316 4.3 警告 frank krger
TYPO3 Association		 - TYPO3 の nl_listman 拡張におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4388 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
242317 7.5 危険 bookingcentre - Venalsur Booking Centre Booking System の hotel_tiempolibre_ext.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4386 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
242318 7.5 危険 AlienVault - AlienVault OSSIM の repository/repository_attachment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4375 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
242319 7.5 危険 AlienVault - AlienVault OSSIM の repository/repository_attachment.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4374 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
242320 7.5 危険 AlienVault - AlienVault OSSIM の repository/repository_attachment.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4373 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268601 8.1 HIGH
Network 		closurecompiler_project closurecompiler closurecompiler is a Closure Compiler for node.js. closurecompiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution … CWE-310
Cryptographic Issues 		CVE-2016-10582 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
268602 8.1 HIGH
Network 		appgyver steroids Steroids is PhoneGap on Steroids, providing native UI elements, multiple WebViews and enhancements for better developer productivity. steroids downloads zipped resources over HTTP, which leaves it vu… CWE-310
Cryptographic Issues 		CVE-2016-10581 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
268603 8.1 HIGH
Network 		nodewebkit_project nodewebkit nodewebkit is an installer for node-webkit. nodewebkit downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swa… CWE-310
Cryptographic Issues 		CVE-2016-10580 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
268604 8.1 HIGH
Network 		chromedriver_project chromedriver Chromedriver is an NPM wrapper for selenium ChromeDriver. Chromedriver before 2.26.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remo… CWE-310
Cryptographic Issues 		CVE-2016-10579 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
268605 8.1 HIGH
Network 		fuseki_project fuseki Fuseki server wrapper and management API in fuseki before 1.0.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RC… CWE-310
Cryptographic Issues 		CVE-2016-10576 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
268606 8.1 HIGH
Network 		hakatashi kindlegen Kindlegen is a simple Node.js wrapper of the official kindlegen program. Kindlegen versions before 1.1.0 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be pos… CWE-310
Cryptographic Issues 		CVE-2016-10575 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
268607 8.1 HIGH
Network 		apk-parser3_project apk-parser3 apk-parser3 is a module to extract Android Manifest info from an APK file. apk-parser3 versions before 0.1.3 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be… CWE-310
Cryptographic Issues 		CVE-2016-10574 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
268608 8.1 HIGH
Network 		mongodb-instance_project mongodb-instance mongodb-instance before 0.0.3 installs mongodb locally. mongodb-instance downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code exec… CWE-310
Cryptographic Issues 		CVE-2016-10572 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268609 8.1 HIGH
Network 		bkjs-wand_project bkjs-wand bkjs-wand is imagemagick wand support for node.js and backendjs bkjs-wand versions lower than 0.3.2 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible… CWE-310
Cryptographic Issues 		CVE-2016-10571 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268610 8.1 HIGH
Network 		embedza_project embedza embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. embedza versions below 1.2.4 download JavaScript resources over HTTP, which leaves it vulne… CWE-310
Cryptographic Issues 		CVE-2016-10569 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm