Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242741	6.8	警告	databay	-	MaxCMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-3424	2012-06-26 16:18	2009-09-25	Show	GitHub Exploit DB Packet Storm

242742	8.5	危険	Craig Barratt	-	BackupPC の CgiUserConfigEdit における重要なファイルを読み書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3369	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242743	9.3	危険	FTPShell	-	FTPShell Client におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3364	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242744	4.3	警告	Datemill	-	Datemill におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3360	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242745	4.3	警告	datetopia	-	Match Agency BiZ におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3359	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242746	4.3	警告	datetopia	-	Datetopia Buy Dating Site の profile.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3355	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242747	10	危険	Drupal andrew sterling hanenkamp	-	Drupal の Rest API モジュールにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-3354	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242748	7.5	危険	datavore	-	Datavore Gyro における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3349	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242749	4.3	警告	datavore	-	Datavore Gyro におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3348	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242750	10	危険	D-Link Systems, Inc.	-	D-Link DIR-400 無線ルータにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3347	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268051	6.5	MEDIUM Network	novell	service_desk	Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via …	CWE-200 Information Exposure	CVE-2016-1594	2024-11-21 11:46	2016-04-22	Show	GitHub Exploit DB Packet Storm

268052	7.2	HIGH Network	novell	service_desk	Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a …	CWE-22 Path Traversal	CVE-2016-1593	2024-11-21 11:46	2016-04-22	Show	GitHub Exploit DB Packet Storm

268053	7.5	HIGH Network	cisco	adaptive_security_appliance_software	The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug ID C…	CWE-399 Resource Management Errors	CVE-2016-1367	2024-11-21 11:46	2016-04-21	Show	GitHub Exploit DB Packet Storm

268054	7.5	HIGH Network	cisco	wireless_lan_controller_software	Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjo…	CWE-20 Improper Input Validation	CVE-2016-1364	2024-11-21 11:46	2016-04-21	Show	GitHub Exploit DB Packet Storm

268055	9.8	CRITICAL Network	cisco	wireless_lan_controller_software	Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers …	CWE-399 Resource Management Errors	CVE-2016-1363	2024-11-21 11:46	2016-04-21	Show	GitHub Exploit DB Packet Storm

268056	7.5	HIGH Network	cisco	aireos	Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka …	CWE-399 Resource Management Errors	CVE-2016-1362	2024-11-21 11:46	2016-04-21	Show	GitHub Exploit DB Packet Storm

268057	7.5	HIGH Network	cisco	ios ios_xe	The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-1384	2024-11-21 11:46	2016-04-21	Show	GitHub Exploit DB Packet Storm

268058	9.8	CRITICAL Network	debian suse opensuse canonical google	debian_linux linux_enterprise leap ubuntu_linux chrome	Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.	NVD-CWE-noinfo	CVE-2016-1659	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

268059	4.3	MEDIUM Network	novell opensuse google debian	suse_package_hub_for_suse_linux_enterprise leap chrome debian_linux	The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and o…	CWE-200 CWE-284 Information Exposure Improper Access Control	CVE-2016-1658	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

268060	4.3	MEDIUM Network	debian novell opensuse google	debian_linux suse_package_hub_for_suse_linux_enterprise leap chrome	The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which…	CWE-254 7PK - Security Features	CVE-2016-1657	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed