Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242371 4.3 警告 ATutor - ATRC ACollab におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4944 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
242372 4.3 警告 ATutor - ACollab におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4942 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
242373 4.3 警告 ATutor - ATRC ACollab の sign_in.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4941 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
242374 7.5 危険 esoftpro - Online Guestbook Pro の ogp_show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4935 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242375 4.3 警告 esoftpro - Online Photo Pro の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4934 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242376 6.8 警告 bestwebsharing - Groovy Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4931 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242377 4.3 警告 esoftpro - Online Contact Manager および EContact PRO におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4926 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242378 6.8 警告 creasito - Portale e-commerce Creasito における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4925 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242379 4.3 警告 dan pascu - Dan Pascu python-cjson における特定のクロスサイトスクリプティング攻撃を誘発する脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4924 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
242380 6.8 警告 dootzky - oBlog の admin/index.php における総当りパスワード推測攻撃を実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-4909 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266771 7.8 HIGH
Local 		microsoft windows_server_2012
windows_8.1
windows_rt_8.1 		The Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 improperly establishes secure communications channels, which allows local users to gain privileges b… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3300 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
266772 7.5 HIGH
Network 		microsoft edge The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3296 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
266773 7.5 HIGH
Network 		microsoft internet_explorer
edge 		Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3293 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
266774 7.5 HIGH
Network 		microsoft internet_explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-20… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3290 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
266775 7.8 HIGH
Local 		microsoft live_meeting
lync
office
windows_7
skype_for_business
windows_server_2008
word_viewer
windows_vista 		The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync… CWE-20
 Improper Input Validation  		CVE-2016-3303 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
266776 7.8 HIGH
Local 		microsoft windows_rt_8.1
live_meeting
windows_server_2012
lync
office
windows_7
windows_10
windows_8.1
skype_for_business
windows_server_2008
word_viewer
windows_vista 		The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 16… CWE-20
 Improper Input Validation  		CVE-2016-3301 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
266777 5.3 MEDIUM
Network 		microsoft windows_rt_8.1
windows_server_2012
windows_7
windows_10
windows_8.1
windows_server_2008
windows_vista 		Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to hi… CWE-284
Improper Access Control 		CVE-2016-3299 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
266778 7.5 HIGH
Network 		microsoft edge
internet_explorer 		Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability tha… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3289 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
266779 7.5 HIGH
Network 		microsoft internet_explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-20… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3288 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
266780 7.5 HIGH
Network 		microsoft windows_server_2008
windows_server_2012
windows_rt
windows_10
windows_8.1
windows_7
windows_rt_8.1
windows_vista 		Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows ma… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3237 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm