Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242721 4.3 警告 frank krger
TYPO3 Association		 - TYPO3 の nl_listman 拡張におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4388 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
242722 7.5 危険 bookingcentre - Venalsur Booking Centre Booking System の hotel_tiempolibre_ext.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4386 2012-06-26 16:18 2009-12-22 Show GitHub Exploit DB Packet Storm
242723 7.5 危険 AlienVault - AlienVault OSSIM の repository/repository_attachment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4375 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
242724 7.5 危険 AlienVault - AlienVault OSSIM の repository/repository_attachment.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4374 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
242725 7.5 危険 AlienVault - AlienVault OSSIM の repository/repository_attachment.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4373 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
242726 7.5 危険 AlienVault - AlienVault OSSIM における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4372 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
242727 3.5 注意 Drupal - Drupal Core の Locale モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4371 2012-06-26 16:18 2009-12-21 Show GitHub Exploit DB Packet Storm
242728 7.5 危険 fr.simon rundell
TYPO3 Association		 - TYPO3 の ste_parish_admin 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4401 2012-06-26 16:18 2008-07-9 Show GitHub Exploit DB Packet Storm
242729 4.3 警告 fr.simon rundell
TYPO3 Association		 - TYPO3 の ste_parish_admin 拡張におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4400 2012-06-26 16:18 2008-07-9 Show GitHub Exploit DB Packet Storm
242730 7.5 危険 fr.simon rundell
TYPO3 Association		 - TYPO3 の hs_religiousartgallery 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4399 2012-06-26 16:18 2008-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267661 7.8 HIGH
Local 		apple mac_os_x QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1767 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267662 7.5 HIGH
Network 		apple iphone_os The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors. NVD-CWE-noinfo
CVE-2016-1766 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267663 7.8 HIGH
Local 		apple xcode otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1765 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267664 4.3 MEDIUM
Network 		apple mac_os_x The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL. CWE-200
Information Exposure 		CVE-2016-1764 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267665 3.5 LOW
Network 		apple iphone_os Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing … CWE-20
 Improper Input Validation  		CVE-2016-1763 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267666 8.1 HIGH
Network 		apple
debian
canonical
xmlsoft
redhat
mcafee 		watchos
iphone_os
mac_os_x
tvos
safari
debian_linux
ubuntu_linux
libxml2
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_… 		The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1762 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267667 9.8 CRITICAL
Network 		apple watchos
iphone_os
mac_os_x 		libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML docum… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1761 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267668 7.8 HIGH
Local 		apple mac_os_x The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1759 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267669 3.3 LOW
Local 		apple iphone_os
mac_os_x 		The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app. CWE-119
CWE-200
Incorrect Access of Indexable Resource ('Range Error') 
Information Exposure 		CVE-2016-1758 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267670 7.0 HIGH
Local 		apple iphone_os
mac_os_x 		Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app. CWE-362
Race Condition 		CVE-2016-1757 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm