Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242581 7.5 危険 eshopbuilder - Eshopbuilde CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4155 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
242582 5 警告 Elxis - Elxis CMS の includes/feedcreator.class.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4154 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
242583 5.8 警告 Best Practical Solutions - Best Practical Solutions RT の html/Elements/SetupSessionCookie におけるセッションをハイジャックされるの脆弱性 CWE-287
不適切な認証 		CVE-2009-4151 2012-06-26 16:18 2009-11-30 Show GitHub Exploit DB Packet Storm
242584 9.3 危険 daz3d - DAZ Studio における任意の JavaScript コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4148 2012-06-26 16:18 2009-12-4 Show GitHub Exploit DB Packet Storm
242585 7.2 危険 FreeBSD - FreeBSD の libexec/rtld-elf/rtld.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4147 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
242586 7.2 危険 FreeBSD - FreeBSD の libexec/rtld-elf/rtld.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4146 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
242587 4.4 警告 GNU Project - GNU coreutils の dist-check.mk の distcheck rule における権限を取得される脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-4135 2012-06-26 16:18 2009-12-5 Show GitHub Exploit DB Packet Storm
242588 6.5 警告 Condor Project
レッドハット		 - MRG の Grid Execute Node で使用される Condor における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-4133 2012-06-26 16:18 2009-12-23 Show GitHub Exploit DB Packet Storm
242589 7.2 危険 GNU Project - GNU GRUB における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-4128 2012-06-26 16:18 2009-12-1 Show GitHub Exploit DB Packet Storm
242590 4.3 警告 Drupal
Alex Barth		 - Drupal の Feed Element Mapper におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4119 2012-06-26 16:18 2009-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267041 5.3 MEDIUM
Network 		ecava integraxor CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL. NVD-CWE-Other
CVE-2016-2303 2024-11-21 11:48 2016-04-22 Show GitHub Exploit DB Packet Storm
267042 5.3 MEDIUM
Network 		ecava integraxor Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages. CWE-200
Information Exposure 		CVE-2016-2302 2024-11-21 11:48 2016-04-22 Show GitHub Exploit DB Packet Storm
267043 6.3 MEDIUM
Network 		ecava integraxor SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2016-2301 2024-11-21 11:48 2016-04-22 Show GitHub Exploit DB Packet Storm
267044 6.5 MEDIUM
Network 		ecava integraxor Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors. CWE-287
Improper Authentication 		CVE-2016-2300 2024-11-21 11:48 2016-04-22 Show GitHub Exploit DB Packet Storm
267045 7.3 HIGH
Network 		ecava integraxor SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2016-2299 2024-11-21 11:48 2016-04-22 Show GitHub Exploit DB Packet Storm
267046 7.5 HIGH
Network 		accuenergy acuvim_ii_net_firmware
acuvim_iir_net_firmware 		The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover a cleartext mail-server password via unspecified vectors. CWE-200
Information Exposure 		CVE-2016-2294 2024-11-21 11:48 2016-04-21 Show GitHub Exploit DB Packet Storm
267047 8.6 HIGH
Network 		accuenergy acuvim_iir_net_firmware
acuvim_ii_net_firmware 		The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover settings via a direct request to an unspecified URL. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2293 2024-11-21 11:48 2016-04-21 Show GitHub Exploit DB Packet Storm
267048 7.5 HIGH
Network 		honeywell uniformance_process_history_database Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database (PHD) R310, R320, and R321 allows remote attackers to cause a denial of service (service outage) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2280 2024-11-21 11:48 2016-04-21 Show GitHub Exploit DB Packet Storm
267049 5.5 MEDIUM
Local 		symantec altiris_it_management_suite The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to bypass intended application-blacklist restr… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2202 2024-11-21 11:48 2016-04-21 Show GitHub Exploit DB Packet Storm
267050 5.9 MEDIUM
Network 		squid-cache squid The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows… CWE-20
 Improper Input Validation  		CVE-2016-2390 2024-11-21 11:48 2016-04-20 Show GitHub Exploit DB Packet Storm