Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242691 5 警告 ACME Laboratories - mini_httpd におけるファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4490 2012-06-26 16:19 2010-01-13 Show GitHub Exploit DB Packet Storm
242692 5 警告 Cherokee Project - Cherokee の header.c におけるウィンドウのタイトルを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4489 2012-06-26 16:19 2010-01-13 Show GitHub Exploit DB Packet Storm
242693 4.3 警告 bloofox - BloofoxCMS の search.5.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4522 2012-06-26 16:19 2009-12-31 Show GitHub Exploit DB Packet Storm
242694 4.3 警告 Eclipse Foundation - BIRT の birt-viewer/run におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4521 2012-06-26 16:19 2009-12-17 Show GitHub Exploit DB Packet Storm
242695 3.5 注意 Drupal
astha bhatnagar		 - Drupal のモジュールの OpenSocial Shindig-Integrator モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4514 2012-06-26 16:19 2009-12-31 Show GitHub Exploit DB Packet Storm
242696 9.3 危険 AzeoTech, Inc. - AzeoTech DAQFactory の Web サービスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4480 2012-06-26 16:19 2009-12-30 Show GitHub Exploit DB Packet Storm
242697 4.3 警告 Episerver - Ektron CMS400.NET におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4473 2012-06-26 16:19 2009-12-30 Show GitHub Exploit DB Packet Storm
242698 7.5 危険 freeschool - FreeSchool における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4471 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242699 7.5 危険 dvbbs - DVBBS の boardrule.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4470 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242700 4.3 警告 giombetti - phpPowerCards の pagenumber.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4469 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268301 6.1 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 2.1.0. It allows XSS via CSRF. CWE-352
 Origin Validation Error 		CVE-2016-11084 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
268302 6.1 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 2.2.0. It allows XSS because it configures files to be opened in a browser window. CWE-79
Cross-site Scripting 		CVE-2016-11083 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
268303 6.1 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 2.2.0. It allows XSS via a crafted link. CWE-79
Cross-site Scripting 		CVE-2016-11082 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
268304 4.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 2.2.0. It allows unintended access to information stored by a web browser. CWE-200
Information Exposure 		CVE-2016-11081 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
268305 4.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2016-11080 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
268306 6.1 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL. CWE-79
Cross-site Scripting 		CVE-2016-11079 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
268307 6.5 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI. CWE-200
Information Exposure 		CVE-2016-11078 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
268308 2.7 LOW
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2016-11077 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
268309 5.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It does not ensure that a cookie is used over SSL. CWE-295
Improper Certificate Validation  		CVE-2016-11076 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
268310 5.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It allows attackers to obtain sensitive information about team URLs via an API. CWE-200
Information Exposure 		CVE-2016-11075 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm