Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242471	9.3	危険	dawningsoft	-	Dawningsoft PowerCHM におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1352	2012-06-26 16:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

242472	6.8	警告	chcounter	-	chCounter の stats/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1347	2012-06-26 16:10	2009-04-20	Show	GitHub Exploit DB Packet Storm

242473	7.5	危険	cpcommerce	-	cpCommerce の document.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1345	2012-06-26 16:10	2009-04-20	Show	GitHub Exploit DB Packet Storm

242474	4.3	警告	Drupal	-	Drupal 用の Localization クライアントモジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1344	2012-06-26 16:10	2009-04-15	Show	GitHub Exploit DB Packet Storm

242475	4.3	警告	Drupal	-	Drupal 用の Print モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1343	2012-06-26 16:10	2009-04-15	Show	GitHub Exploit DB Packet Storm

242476	4.3	警告	Drupal	-	Drupal 用の CCK コメント参照モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1342	2012-06-26 16:10	2009-04-15	Show	GitHub Exploit DB Packet Storm

242477	7.5	危険	guestcal	-	GuestCal の includes/ini.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-1319	2012-06-26 16:10	2009-04-17	Show	GitHub Exploit DB Packet Storm

242478	6.8	警告	aquacms	-	Aqua CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1317	2012-06-26 16:10	2009-04-17	Show	GitHub Exploit DB Packet Storm

242479	7.5	危険	abk-soft	-	AbleSpace における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1316	2012-06-26 16:10	2009-04-17	Show	GitHub Exploit DB Packet Storm

242480	4.3	警告	abk-soft	-	AbleSpace におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1315	2012-06-26 16:10	2009-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267291	8.8	HIGH Network	apple	safari watchos iphone_os	WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a differe…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1723	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

267292	7.8	HIGH Local	apple	tvos iphone_os mac_os_x watchos	syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1722	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

267293	7.8	HIGH Local	apple	iphone_os mac_os_x tvos watchos	The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1721	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

267294	7.8	HIGH Local	apple	mac_os_x tvos iphone_os watchos	IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1720	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

267295	7.8	HIGH Local	apple	watchos iphone_os mac_os_x tvos	The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vector…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1719	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

267296	7.3	HIGH Local	apple	mac_os_x	The IOAcceleratorFamily2 interface in IOAcceleratorFamily in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1718	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

267297	7.8	HIGH Local	apple	tvos iphone_os mac_os_x watchos	The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1717	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

267298	7.8	HIGH Local	apple	mac_os_x	AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1716	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

267299	6.1	MEDIUM Network	siemens	ozw672_firmware ozw772_firmware	Cross-site scripting (XSS) vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices before 6.00 allows remote attackers to inject arbi…	CWE-79 Cross-site Scripting	CVE-2016-1488	2024-11-21 11:46	2016-01-30	Show	GitHub Exploit DB Packet Storm

267300	6.1	MEDIUM Network	cisco	unity_connection	Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux82596.	CWE-79 Cross-site Scripting	CVE-2016-1304	2024-11-21 11:46	2016-01-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed