Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242371 4.3 警告 ATutor - ATRC ACollab におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4944 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
242372 4.3 警告 ATutor - ACollab におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4942 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
242373 4.3 警告 ATutor - ATRC ACollab の sign_in.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4941 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
242374 7.5 危険 esoftpro - Online Guestbook Pro の ogp_show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4935 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242375 4.3 警告 esoftpro - Online Photo Pro の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4934 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242376 6.8 警告 bestwebsharing - Groovy Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4931 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242377 4.3 警告 esoftpro - Online Contact Manager および EContact PRO におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4926 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242378 6.8 警告 creasito - Portale e-commerce Creasito における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4925 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242379 4.3 警告 dan pascu - Dan Pascu python-cjson における特定のクロスサイトスクリプティング攻撃を誘発する脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4924 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
242380 6.8 警告 dootzky - oBlog の admin/index.php における総当りパスワード推測攻撃を実行される脆弱性 CWE-287
不適切な認証
CVE-2009-4909 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268621 6.5 MEDIUM
Network
cpanel cpanel cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82). CWE-77
Command Injection
CVE-2016-10849 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268622 7.2 HIGH
Network
cpanel cpanel cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81). CWE-285
Improper Authorization
CVE-2016-10848 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268623 8.1 HIGH
Network
cpanel cpanel cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80). CWE-74
Injection
CVE-2016-10847 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268624 8.1 HIGH
Network
cpanel cpanel cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79). CWE-275
 Permission Issues
CVE-2016-10846 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268625 8.1 HIGH
Network
cpanel cpanel cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78). CWE-74
Injection
CVE-2016-10845 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268626 6.5 MEDIUM
Network
cpanel cpanel The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77). CWE-200
Information Exposure
CVE-2016-10844 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268627 8.1 HIGH
Network
cpanel cpanel cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76). CWE-77
Command Injection
CVE-2016-10843 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268628 6.5 MEDIUM
Network
cpanel cpanel cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74). CWE-20
 Improper Input Validation 
CVE-2016-10842 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268629 5.3 MEDIUM
Network
cpanel cpanel The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73). CWE-199
 Information Management Errors
CVE-2016-10841 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268630 8.8 HIGH
Network
cpanel cpanel cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72). CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2016-10840 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm