Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242451	7.5	危険	foobla Joomla!	-	Joomla! の foobla_suggestions コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3669	2012-06-26 16:18	2009-10-11	Show	GitHub Exploit DB Packet Storm

242452	7.5	危険	adsdx	-	AdsDX の admin/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3667	2012-06-26 16:18	2009-10-11	Show	GitHub Exploit DB Packet Storm

242453	5	警告	filecopa-ftpserver	-	FileCopa FTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3662	2012-06-26 16:18	2009-10-11	Show	GitHub Exploit DB Packet Storm

242454	6.8	警告	Joomla! Blue Constant Media Ltd	-	Joomla! 用の DJ-Catalog コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3661	2012-06-26 16:18	2009-10-11	Show	GitHub Exploit DB Packet Storm

242455	6.8	警告	eFront Learning	-	Efront の libraries/database.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-3660	2012-06-26 16:18	2009-10-11	Show	GitHub Exploit DB Packet Storm

242456	9.3	危険	AOL	-	AOL の sb.dll における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3658	2012-06-26 16:18	2009-10-9	Show	GitHub Exploit DB Packet Storm

242457	6.4	警告	Drupal 316solutions	-	Drupal 用の Boost モジュールにおける新しい webroot ディレクトリを生成される脆弱性	CWE-Other その他	CVE-2009-3654	2012-06-26 16:18	2009-09-30	Show	GitHub Exploit DB Packet Storm

242458	3.5	注意	Drupal darren oh	-	Drupal 用モジュールの XML Sitemap の追加リンクインターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3653	2012-06-26 16:18	2009-09-30	Show	GitHub Exploit DB Packet Storm

242459	4.3	警告	Drupal david strauss	-	Drupa のモジュールの Dex におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3650	2012-06-26 16:18	2009-09-30	Show	GitHub Exploit DB Packet Storm

242460	3.5	注意	Drupal apsivam	-	Drupal のモジュールの Service Links におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3648	2012-06-26 16:18	2009-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266971	7.5	HIGH Network	squid-cache	squid	Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long s…	CWE-20 Improper Input Validation	CVE-2016-2569	2024-11-21 11:48	2016-02-27	Show	GitHub Exploit DB Packet Storm

266972	7.8	HIGH Local	flexera	installshield	Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executa…	NVD-CWE-Other	CVE-2016-2542	2024-11-21 11:48	2016-02-24	Show	GitHub Exploit DB Packet Storm

266973	7.5	HIGH Network	is_my_json_valid_project	is_my_json_valid	The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports['utc-millisec'] regular expression, which allows remote attackers to cause a denial of service (blocked event loop) via…	CWE-20 Improper Input Validation	CVE-2016-2537	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

266974	8.8	HIGH Network	sap google	3d_visual_enterprise_viewer sketchup	Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be…	CWE-399 Resource Management Errors	CVE-2016-2536	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

266975	5.9	MEDIUM Network	fedoraproject digium	fedora asterisk certified_asterisk	chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2016-2316	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

266976	6.5	MEDIUM Network	digium	asterisk certified_asterisk	Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3 allow remote authenticated users to ca…	NVD-CWE-Other	CVE-2016-2232	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

266977	9.8	CRITICAL Network	advantech	vesp211-eu_firmware vesp211-232_firmware	The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allow…	CWE-284 Improper Access Control	CVE-2016-2275	2024-11-21 11:48	2016-02-21	Show	GitHub Exploit DB Packet Storm

266978	5.5	MEDIUM Local	xen	xen	VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.	NVD-CWE-Other	CVE-2016-2271	2024-11-21 11:48	2016-02-20	Show	GitHub Exploit DB Packet Storm

266979	6.8	MEDIUM Network	debian fedoraproject xen oracle	debian_linux fedora xen vm_server	Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.	CWE-20 Improper Input Validation	CVE-2016-2270	2024-11-21 11:48	2016-02-20	Show	GitHub Exploit DB Packet Storm

266980	5.3	MEDIUM Adjacent	belden	hirschmann_firmware hirschmann_l2b	The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator pa…	CWE-200 Information Exposure	CVE-2016-2509	2024-11-21 11:48	2016-02-19	Show	GitHub Exploit DB Packet Storm