Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242751 7.5 危険 alphaplug
Joomla!
- Joomla! の alphauserpoints コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3342 2012-06-26 16:18 2009-09-24 Show GitHub Exploit DB Packet Storm
242752 5 警告 freeSSHd - FreeSSHD におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-3340 2012-06-26 16:18 2009-09-24 Show GitHub Exploit DB Packet Storm
242753 9.3 危険 effectmatrix - EffectMatrix Magic Morph におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-3338 2012-06-26 16:18 2009-09-24 Show GitHub Exploit DB Packet Storm
242754 7.5 危険 Mambo Foundation
alibasta
- Mambo の koesubmit コンポーネントの koesubmit.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-3333 2012-06-26 16:18 2009-09-23 Show GitHub Exploit DB Packet Storm
242755 7.5 危険 ddlcms - DDL CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-3331 2012-06-26 16:18 2009-09-23 Show GitHub Exploit DB Packet Storm
242756 6.8 警告 cpecreator - cP Creator の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3330 2012-06-26 16:18 2009-09-23 Show GitHub Exploit DB Packet Storm
242757 9.3 危険 exeter - Winplot におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-3329 2012-06-26 16:18 2009-09-23 Show GitHub Exploit DB Packet Storm
242758 7.5 危険 cmscontrol - CMScontrol Content Management System の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3326 2012-06-26 16:18 2009-09-23 Show GitHub Exploit DB Packet Storm
242759 7.5 危険 Joomla!
focusdev
- Joomla! の Focusplus Developments surveymanager コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3325 2012-06-26 16:18 2009-09-23 Show GitHub Exploit DB Packet Storm
242760 7.5 危険 andres g aragoneses - ProdLer の include/prodler.class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-3324 2012-06-26 16:18 2009-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267451 6.2 MEDIUM
Local
apple iphone_os The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app. CWE-284
Improper Access Control
CVE-2016-1760 2024-11-21 11:47 2016-03-30 Show GitHub Exploit DB Packet Storm
267452 5.9 MEDIUM
Network
apple watchos
iphone_os
mac_os_x
Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachmen… CWE-310
Cryptographic Issues
CVE-2016-1788 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267453 5.3 MEDIUM
Network
apple mac_os_x_server Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors. CWE-200
Information Exposure
CVE-2016-1787 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267454 5.4 MEDIUM
Network
apple iphone_os
safari
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx (aka redirection) status code, which allows remote attackers to spoof the … CWE-200
Information Exposure
CVE-2016-1786 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267455 6.5 MEDIUM
Network
apple iphone_os
safari
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Or… CWE-200
Information Exposure
CVE-2016-1785 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267456 6.5 MEDIUM
Network
apple iphone_os
tvos
safari
The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service (resource consumption and application crash) … CWE-400
 Uncontrolled Resource Consumption
CVE-2016-1784 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267457 8.8 HIGH
Network
apple
webkitgtk
iphone_os
tvos
safari
webkitgtk\+
WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1783 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267458 6.5 MEDIUM
Network
apple iphone_os
safari
WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a craf… CWE-284
Improper Access Control
CVE-2016-1782 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267459 4.3 MEDIUM
Network
apple iphone_os
safari
WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors. CWE-19
 Data Processing Errors
CVE-2016-1781 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267460 4.3 MEDIUM
Network
apple iphone_os WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical envi… CWE-200
Information Exposure
CVE-2016-1780 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm