Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242541 7.5 危険 fanupdate - FanUpdate の show-cat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3308 2012-06-26 16:18 2009-09-23 Show GitHub Exploit DB Packet Storm
242542 7.5 危険 frank lichtenheld - FSphp における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3307 2012-06-26 16:18 2009-09-23 Show GitHub Exploit DB Packet Storm
242543 3.3 注意 GForge Group - GForge における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-3304 2012-06-26 16:18 2009-12-4 Show GitHub Exploit DB Packet Storm
242544 4.3 警告 GForge Group - GForge の www/help/tracker.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3303 2012-06-26 16:18 2009-11-24 Show GitHub Exploit DB Packet Storm
242545 7.5 危険 gallium.inria - CamlImages の tiffread.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3296 2012-06-26 16:18 2009-10-16 Show GitHub Exploit DB Packet Storm
242546 4.4 警告 GNOME Project - glib の g_file_copy 関数における他のユーザファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3289 2012-06-26 16:18 2009-08-28 Show GitHub Exploit DB Packet Storm
242547 7.5 危険 アップル - Apple iPhone OS の iPhone Mail における SSL 電子メールサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-3273 2012-06-26 16:18 2009-09-21 Show GitHub Exploit DB Packet Storm
242548 5 警告 アップル - Apple Safari の WebKit.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3272 2012-06-26 16:18 2009-09-21 Show GitHub Exploit DB Packet Storm
242549 4.3 警告 アップル - iPhone OS 上で稼動する Apple Safari におけるサービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-3271 2012-06-26 16:18 2009-09-21 Show GitHub Exploit DB Packet Storm
242550 7.5 危険 dave robinson - Rock Band CMS の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3252 2012-06-26 16:18 2009-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267041 8.8 HIGH
Network 		blackberry blackberry_enterprise_service Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrar… CWE-89
SQL Injection 		CVE-2016-1914 2024-11-21 11:47 2017-04-13 Show GitHub Exploit DB Packet Storm
267042 9.8 CRITICAL
Network 		openbsd
debian
oracle
redhat 		openssh
debian_linux
linux
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_linux_server
enterprise_lin… 		The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to t… CWE-287
Improper Authentication 		CVE-2016-1908 2024-11-21 11:47 2017-04-12 Show GitHub Exploit DB Packet Storm
267043 7.8 HIGH
Local 		freebsd freebsd Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descripto… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-1889 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267044 7.5 HIGH
Network 		freebsd freebsd The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation fa… CWE-287
Improper Authentication 		CVE-2016-1888 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267045 7.8 HIGH
Local 		freebsd freebsd The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1883 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267046 7.8 HIGH
Local 		freebsd freebsd The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafted Linux compatibility layer setgroups system call. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1881 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267047 7.8 HIGH
Local 		freebsd freebsd The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "han… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1880 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267048 9.8 CRITICAL
Network 		busybox
debian
canonical 		busybox
debian_linux
ubuntu_linux 		Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2148 2024-11-21 11:47 2017-02-10 Show GitHub Exploit DB Packet Storm
267049 7.5 HIGH
Network 		busybox
debian
canonical 		busybox
debian_linux
ubuntu_linux 		Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-o… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-2147 2024-11-21 11:47 2017-02-10 Show GitHub Exploit DB Packet Storm
267050 8.1 HIGH
Network 		netapp oncommand_workflow_automation NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors. CWE-284
Improper Access Control 		CVE-2016-1894 2024-11-21 11:47 2017-02-8 Show GitHub Exploit DB Packet Storm