Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242551 4.3 警告 bookelves - Kipper の default.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0763 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
242552 9.3 危険 OptiPNG - OptiPNG の lib/pngxtern/gif/gifread.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0749 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
242553 7.5 危険 craftsilicon - Craft Silicon Banking@Home の Login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0741 2012-06-26 16:10 2009-02-25 Show GitHub Exploit DB Packet Storm
242554 7.5 危険 frankmancuso - BlueBird Prelease の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0740 2012-06-26 16:10 2009-02-25 Show GitHub Exploit DB Packet Storm
242555 7.5 危険 frankmancuso - MyNews の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0739 2012-06-26 16:10 2009-02-25 Show GitHub Exploit DB Packet Storm
242556 7.5 危険 frankmancuso - Auth Php の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0738 2012-06-26 16:10 2009-02-25 Show GitHub Exploit DB Packet Storm
242557 9.3 危険 freearcadescript - Free Arcade Script の pages/play.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0731 2012-06-26 16:10 2009-02-24 Show GitHub Exploit DB Packet Storm
242558 6.8 警告 gigcalendar
Mambo Foundation
Joomla!		 - Mambo の gigcal コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0730 2012-06-26 16:10 2009-02-24 Show GitHub Exploit DB Packet Storm
242559 7.5 危険 gigcalendar
Mambo Foundation
Joomla!		 - Mambo の gigcal コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0726 2012-06-26 16:10 2009-02-24 Show GitHub Exploit DB Packet Storm
242560 7.5 危険 aspthai.net - ASPThai.Net Webboard の bview.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0703 2012-06-26 16:10 2009-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267171 8.1 HIGH
Network 		hp system_management_homepage HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. NVD-CWE-noinfo
CVE-2016-1993 2024-11-21 11:47 2016-03-18 Show GitHub Exploit DB Packet Storm
267172 6.5 MEDIUM
Network 		hp enterprise_security_manager_express
enterprise_security_manager 		HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure 		CVE-2016-1992 2024-11-21 11:47 2016-03-17 Show GitHub Exploit DB Packet Storm
267173 5.4 MEDIUM
Network 		vmware vrealize_business_advanced_and_enterprise Cross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via uns… CWE-79
Cross-site Scripting 		CVE-2016-2075 2024-11-21 11:47 2016-03-16 Show GitHub Exploit DB Packet Storm
267174 8.0 HIGH
Network 		microfocus arcsight_enterprise_security_manager HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download… NVD-CWE-noinfo
CVE-2016-1991 2024-11-21 11:47 2016-03-16 Show GitHub Exploit DB Packet Storm
267175 7.8 HIGH
Local 		microfocus arcsight_enterprise_security_manager HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspeci… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1990 2024-11-21 11:47 2016-03-16 Show GitHub Exploit DB Packet Storm
267176 9.8 CRITICAL
Network 		hp network_automation HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerabili… NVD-CWE-noinfo
CVE-2016-1989 2024-11-21 11:47 2016-03-15 Show GitHub Exploit DB Packet Storm
267177 9.8 CRITICAL
Network 		hp network_automation HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerabili… NVD-CWE-noinfo
CVE-2016-1988 2024-11-21 11:47 2016-03-15 Show GitHub Exploit DB Packet Storm
267178 8.8 HIGH
Network 		mozilla firefox
network_security_services 		Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote a… NVD-CWE-Other
CVE-2016-1979 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
267179 7.3 HIGH
Network 		mozilla firefox
network_security_services 		Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers t… NVD-CWE-Other
CVE-2016-1978 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
267180 8.8 HIGH
Network 		suse
opensuse
oracle
sil
mozilla 		linux_enterprise
leap
opensuse
linux
graphite2
firefox 		The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrar… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1977 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm