Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242771 9.3 危険 Mozilla Foundation
didier ernotte		 - Firefox の infoRSS におけるクロスドメインスクリプティング攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4101 2012-06-26 16:18 2009-07-3 Show GitHub Exploit DB Packet Storm
242772 7.5 危険 Joomla!
g4j.laoneo		 - Joomla! 用 Google Calendar GCalendar コンポーネンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4099 2012-06-26 16:18 2009-11-29 Show GitHub Exploit DB Packet Storm
242773 7.5 危険 companionway - myPhile における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-4095 2012-06-26 16:18 2009-11-29 Show GitHub Exploit DB Packet Storm
242774 7.5 危険 designforjoomla
Joomla!		 - Joomla! 用の D4J eZine コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4094 2012-06-26 16:18 2009-11-29 Show GitHub Exploit DB Packet Storm
242775 7.5 危険 e107.org - e107 の検索機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4084 2012-06-26 16:18 2009-11-29 Show GitHub Exploit DB Packet Storm
242776 4.3 警告 e107.org - e107 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4083 2012-06-26 16:18 2009-11-29 Show GitHub Exploit DB Packet Storm
242777 4.4 警告 DAG - dstat における権限を取得される脆弱性 CWE-Other
その他 		CVE-2009-4081 2012-06-26 16:18 2009-11-29 Show GitHub Exploit DB Packet Storm
242778 7.5 危険 GForge Group - GForge における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4070 2012-06-26 16:18 2009-11-24 Show GitHub Exploit DB Packet Storm
242779 9.3 危険 Krzysztof Kowalczyk
ccxvii		 - SumatraPDF で使用される MuPDF の pdf_shade4.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4117 2012-06-26 16:18 2009-11-30 Show GitHub Exploit DB Packet Storm
242780 3.5 注意 CutePHP - CutePHP CuteNews におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4116 2012-06-26 16:18 2009-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268081 5.5 MEDIUM
Local 		huawei p8_firmware The graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-… CWE-399
 Resource Management Errors 		CVE-2016-1496 2024-11-21 11:46 2016-04-13 Show GitHub Exploit DB Packet Storm
268082 7.8 HIGH
Local 		huawei mate_s_firmware Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows at… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1495 2024-11-21 11:46 2016-04-13 Show GitHub Exploit DB Packet Storm
268083 6.1 MEDIUM
Network 		cisco unity_connection Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776. CWE-79
Cross-site Scripting 		CVE-2016-1377 2024-11-21 11:46 2016-04-13 Show GitHub Exploit DB Packet Storm
268084 5.3 MEDIUM
Network 		cisco ios_xr Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors, and interface flap) via crafted bit patterns in packets, a… CWE-20
 Improper Input Validation  		CVE-2016-1376 2024-11-21 11:46 2016-04-13 Show GitHub Exploit DB Packet Storm
268085 8.8 HIGH
Local 		qemu
redhat
debian 		qemu
openstack
virtualization
debian_linux 		Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary co… CWE-416
 Use After Free 		CVE-2016-1568 2024-11-21 11:46 2016-04-12 Show GitHub Exploit DB Packet Storm
268086 8.8 HIGH
Network 		oar_project
debian 		oar
debian_linux 		The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1235 2024-11-21 11:46 2016-04-12 Show GitHub Exploit DB Packet Storm
268087 6.1 MEDIUM
Network 		cisco ip_interoperability_and_collaboration_system Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSC… CWE-79
Cross-site Scripting 		CVE-2016-1375 2024-11-21 11:46 2016-04-9 Show GitHub Exploit DB Packet Storm
268088 7.0 HIGH
Local 		exim exim Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1531 2024-11-21 11:46 2016-04-8 Show GitHub Exploit DB Packet Storm
268089 8.1 HIGH
Local 		redhat
oracle
qemu 		openstack
linux
qemu 		The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1714 2024-11-21 11:46 2016-04-8 Show GitHub Exploit DB Packet Storm
268090 6.8 MEDIUM
Network 		netapp clustered_data_ontap NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte… CWE-200
CWE-20
Information Exposure
 Improper Input Validation  		CVE-2016-1563 2024-11-21 11:46 2016-04-7 Show GitHub Exploit DB Packet Storm