Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242701 7.5 危険 cccp-common-clan-portal-pasterbin - CCCP Community Clan Portal Pastebin の insert_to_pastebin 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1245 2012-06-26 16:10 2009-04-6 Show GitHub Exploit DB Packet Storm
242702 7.5 危険 arcadwy - Arcadwy Arcade Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1229 2012-06-26 16:10 2009-04-2 Show GitHub Exploit DB Packet Storm
242703 4.3 警告 arcadwy - Arcadwy Arcade Script CMS の register.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1228 2012-06-26 16:10 2009-04-2 Show GitHub Exploit DB Packet Storm
242704 5 警告 fullrevolution - aspWebCalendar Free Edition におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1223 2012-06-26 16:10 2009-04-2 Show GitHub Exploit DB Packet Storm
242705 7.5 危険 auth2db - auth2db における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1208 2012-06-26 16:10 2009-04-1 Show GitHub Exploit DB Packet Storm
242706 4.3 警告 banshee-project - Banshee の DAAP 拡張の apps/web/vs_diag.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1175 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
242707 10 危険 DELL EMC (旧 EMC Corporation) - EMC RepliStor におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1119 2012-06-26 16:10 2009-04-15 Show GitHub Exploit DB Packet Storm
242708 9.3 危険 GeoVision - GeoVision DVR システムの LIVEAU~1.OCX における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2009-1092 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
242709 4.3 警告 expressionengine - ExpressionEngine の system/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1070 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
242710 9.3 危険 AB Team - bsplayer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1068 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267601 8.8 HIGH
Network
debian
suse
opensuse
google
canonical
debian_linux
linux_enterprise
leap
chrome
ubuntu_linux
Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or pos… NVD-CWE-Other
CVE-2016-1655 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
267602 6.5 MEDIUM
Network
debian
suse
opensuse
google
canonical
debian_linux
linux_enterprise
leap
chrome
ubuntu_linux
The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unk… CWE-20
 Improper Input Validation 
CVE-2016-1654 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
267603 8.8 HIGH
Network
debian
suse
opensuse
canonical
google
debian_linux
linux_enterprise
leap
ubuntu_linux
chrome
The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecifie… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1653 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
267604 6.1 MEDIUM
Network
debian
suse
opensuse
google
debian_linux
linux_enterprise
leap
chrome
Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allow… CWE-79
Cross-site Scripting
CVE-2016-1652 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
267605 8.1 HIGH
Network
google
debian
suse
opensuse
chrome
debian_linux
linux_enterprise
leap
fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers … CWE-200
Information Exposure
CVE-2016-1651 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
267606 9.8 CRITICAL
Network
dhcpcd_project
google
dhcpcd
android
dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attacke… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1503 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
267607 8.4 HIGH
Local
cisco unified_computing_system_platform_emulator Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename argum… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1340 2024-11-21 11:46 2016-04-16 Show GitHub Exploit DB Packet Storm
267608 7.8 HIGH
Local
cisco unified_computing_system_platform_emulator Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted arguments on a ucspe-copy command line, aka Bug ID CSCux68… CWE-78
OS Command 
CVE-2016-1339 2024-11-21 11:46 2016-04-16 Show GitHub Exploit DB Packet Storm
267609 7.5 HIGH
Network
juniper junos Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate of unspecified VXLAN packets. CWE-19
 Data Processing Errors
CVE-2016-1274 2024-11-21 11:46 2016-04-15 Show GitHub Exploit DB Packet Storm
267610 5.9 MEDIUM
Network
juniper junos Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers t… CWE-310
Cryptographic Issues
CVE-2016-1273 2024-11-21 11:46 2016-04-15 Show GitHub Exploit DB Packet Storm