Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242751	7.5	危険	alphaplug Joomla!	-	Joomla! の alphauserpoints コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3342	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242752	5	警告	freeSSHd	-	FreeSSHD におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3340	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242753	9.3	危険	effectmatrix	-	EffectMatrix Magic Morph におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3338	2012-06-26 16:18	2009-09-24	Show	GitHub Exploit DB Packet Storm

242754	7.5	危険	Mambo Foundation alibasta	-	Mambo の koesubmit コンポーネントの koesubmit.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-3333	2012-06-26 16:18	2009-09-23	Show	GitHub Exploit DB Packet Storm

242755	7.5	危険	ddlcms	-	DDL CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-3331	2012-06-26 16:18	2009-09-23	Show	GitHub Exploit DB Packet Storm

242756	6.8	警告	cpecreator	-	cP Creator の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3330	2012-06-26 16:18	2009-09-23	Show	GitHub Exploit DB Packet Storm

242757	9.3	危険	exeter	-	Winplot におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3329	2012-06-26 16:18	2009-09-23	Show	GitHub Exploit DB Packet Storm

242758	7.5	危険	cmscontrol	-	CMScontrol Content Management System の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3326	2012-06-26 16:18	2009-09-23	Show	GitHub Exploit DB Packet Storm

242759	7.5	危険	Joomla! focusdev	-	Joomla! の Focusplus Developments surveymanager コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3325	2012-06-26 16:18	2009-09-23	Show	GitHub Exploit DB Packet Storm

242760	7.5	危険	andres g aragoneses	-	ProdLer の include/prodler.class.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-3324	2012-06-26 16:18	2009-09-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267421	9.8	CRITICAL Network	hp	data_protector	HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulner…	CWE-306 Missing Authentication for Critical Function	CVE-2016-2004	2024-11-21 11:47	2016-04-21	Show	GitHub Exploit DB Packet Storm

267422	9.8	CRITICAL Network	hp	xp7_command_view_advanced_edition_suite p9000_command_view_advanced_edition_software	HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted seriali…	NVD-CWE-Other	CVE-2016-2003	2024-11-21 11:47	2016-04-21	Show	GitHub Exploit DB Packet Storm

267423	9.8	CRITICAL Network	hp	vertica	The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary …	CWE-77 Command Injection	CVE-2016-2002	2024-11-21 11:47	2016-04-21	Show	GitHub Exploit DB Packet Storm

267424	7.5	HIGH Network	fedoraproject uninett	fedora mod_auth_mellon	The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service (worker process crash, web server de…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2146	2024-11-21 11:47	2016-04-15	Show	GitHub Exploit DB Packet Storm

267425	7.5	HIGH Network	fedoraproject uninett	fedora mod_auth_mellon	The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote attackers to cause a denial of service (segmen…	CWE-20 Improper Input Validation	CVE-2016-2145	2024-11-21 11:47	2016-04-15	Show	GitHub Exploit DB Packet Storm

267426	7.6	HIGH Network	vmware	vcenter_server vcloud_director vcloud_automation_identity_appliance	Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles ses…	CWE-287 Improper Authentication	CVE-2016-2076	2024-11-21 11:47	2016-04-15	Show	GitHub Exploit DB Packet Storm

267427	6.1	MEDIUM Network	redhat	satellite	Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter to systems/…	CWE-79 Cross-site Scripting	CVE-2016-2103	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

267428	5.4	MEDIUM Network	debian xymon	debian_linux xymon	Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is…	CWE-79 Cross-site Scripting	CVE-2016-2058	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

267429	3.3	LOW Local	xymon debian	xymon debian_linux	lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to th…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2057	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

267430	8.8	HIGH Network	xymon debian	xymon debian_linux	xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) …	CWE-77 Command Injection	CVE-2016-2056	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm