Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242651 6.8 警告 Mambo Foundation
brilaps
- Mambo で使用される MOStlyCE の administrator/index2.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-7214 2012-06-26 16:10 2009-09-11 Show GitHub Exploit DB Packet Storm
242652 4.3 警告 Mambo Foundation
brilaps
- Mambo で使用される MOStlyCE の mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-7213 2012-06-26 16:10 2009-09-11 Show GitHub Exploit DB Packet Storm
242653 5 警告 geoserver - GeoServer の PartialBufferOutputStream2 における詳細不明な脆弱性 CWE-119
バッファエラー
CVE-2008-7227 2012-06-26 16:10 2008-02-15 Show GitHub Exploit DB Packet Storm
242654 4.6 警告 amsn - aMSN の login_screen.tcl におけるセッションをハイジャックされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-7255 2012-06-26 16:10 2010-04-20 Show GitHub Exploit DB Packet Storm
242655 6.8 警告 ermenegildo fiorito - Irmin CMS の includes/template-loader.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-7254 2012-06-26 16:10 2010-04-7 Show GitHub Exploit DB Packet Storm
242656 7.5 危険 goople cms - Goople CMS の frontpage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0121 2012-06-26 16:10 2009-01-14 Show GitHub Exploit DB Packet Storm
242657 6.8 警告 expinion - PollPro の admin/agent_edit.asp におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-0112 2012-06-26 16:10 2009-01-9 Show GitHub Exploit DB Packet Storm
242658 7.5 危険 goople cms - Goople CMS の frontpage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0111 2012-06-26 16:10 2009-01-9 Show GitHub Exploit DB Packet Storm
242659 6.8 警告 freedesktop.org
Mozilla Foundation
- xdg-open における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-0068 2012-06-26 16:10 2009-01-3 Show GitHub Exploit DB Packet Storm
242660 5.5 警告 ネットギア
Atheros
- Atheros AR9160-BC1A チップセット上の Netgear WNDAP330 Wi-Fi アクセスポイントなどで使用される Atheros 無線ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-0052 2012-06-26 16:10 2009-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267331 7.5 HIGH
Network
cisco nx-os Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP t… CWE-200
Information Exposure
CVE-2016-1455 2024-11-21 11:46 2016-10-6 Show GitHub Exploit DB Packet Storm
267332 7.5 HIGH
Network
dbd-mysql_project
debian
dbd-mysql
debian_linux
Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1246 2024-11-21 11:46 2016-10-6 Show GitHub Exploit DB Packet Storm
267333 5.5 MEDIUM
Local
clamav
canonical
clamav
ubuntu_linux
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file. CWE-284
Improper Access Control
CVE-2016-1372 2024-11-21 11:46 2016-10-4 Show GitHub Exploit DB Packet Storm
267334 5.5 MEDIUM
Local
canonical
clamav
ubuntu_linux
clamav
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable. CWE-284
Improper Access Control
CVE-2016-1371 2024-11-21 11:46 2016-10-4 Show GitHub Exploit DB Packet Storm
267335 8.8 HIGH
Network
unadf_project
debian
unadf
debian_linux
The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file. CWE-20
 Improper Input Validation 
CVE-2016-1244 2024-11-21 11:46 2016-10-4 Show GitHub Exploit DB Packet Storm
267336 9.8 CRITICAL
Network
debian
unadf_project
debian_linux
unadf
Stack-based buffer overflow in the extractTree function in unADF allows remote attackers to execute arbitrary code via a long pathname. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1243 2024-11-21 11:46 2016-10-4 Show GitHub Exploit DB Packet Storm
267337 7.8 HIGH
Local
apache tomcat The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 … CWE-20
 Improper Input Validation 
CVE-2016-1240 2024-11-21 11:46 2016-10-4 Show GitHub Exploit DB Packet Storm
267338 7.5 HIGH
Network
cisco webex_meetings_server Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-validation component of an unspecified service, aka Bug ID C… CWE-20
 Improper Input Validation 
CVE-2016-1483 2024-11-21 11:46 2016-09-19 Show GitHub Exploit DB Packet Storm
267339 5.3 MEDIUM
Network
cisco ios_xr Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service (OSPFv3 process reload) via crafted OSPFv3 packets, aka Bug ID CSCuz66289. CWE-399
 Resource Management Errors
CVE-2016-1433 2024-11-21 11:46 2016-09-19 Show GitHub Exploit DB Packet Storm
267340 8.1 HIGH
Network
cisco webex_meetings_server Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130. CWE-78
OS Command 
CVE-2016-1482 2024-11-21 11:46 2016-09-18 Show GitHub Exploit DB Packet Storm