Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242781 7.5 危険 graugon - Graugon PHP Article Publisher の admin.php における管理者用アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-4808 2012-06-26 16:19 2010-04-23 Show GitHub Exploit DB Packet Storm
242782 7.5 危険 graugon - Graugon PHP Article Publisher における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4807 2012-06-26 16:19 2010-04-23 Show GitHub Exploit DB Packet Storm
242783 7.5 危険 digitalinterchange - Digital Interchange Document Library の admin/save_user.asp における管理者の資格情報を変更される脆弱性 CWE-287
不適切な認証 		CVE-2009-4806 2012-06-26 16:19 2010-04-23 Show GitHub Exploit DB Packet Storm
242784 7.5 危険 TYPO3 Association
andreas schwarzkopf		 - TYPO3 の a21glossary 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4803 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
242785 5 警告 diskos - Diskos CMS におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4799 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
242786 7.5 危険 diskos - Diskos CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4798 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
242787 7.5 危険 glFusion - glFusion の private/system/classes/listfactory.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4796 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
242788 7.5 危険 community cms - Community CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4794 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
242789 7.5 危険 bhavesh chauhan
Joomla!		 - Joomla! 用の Quick News コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4785 2012-06-26 16:19 2010-04-21 Show GitHub Exploit DB Packet Storm
242790 9.3 危険 Blizzard Entertainment, Inc. - Warcraft III: The Frozen Throne の JASS スクリプトインタプリタにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4768 2012-06-26 16:19 2010-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268241 7.5 HIGH
Network 		bmc bladelogic_server_automation_console The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by send… CWE-20
 Improper Input Validation  		CVE-2016-1542 2024-11-21 11:46 2016-06-13 Show GitHub Exploit DB Packet Storm
268242 7.8 HIGH
Local 		cisco application_infrastructure_controller
application_policy_infrastructure_controller_firmware 		The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access vi… NVD-CWE-noinfo
CVE-2016-1420 2024-11-21 11:46 2016-06-10 Show GitHub Exploit DB Packet Storm
268243 8.1 HIGH
Adjacent 		cisco aironet_access_point_software Cisco Access Point devices with software 8.2(102.43) allow remote attackers to cause a denial of service (device reload) via crafted ARP packets, aka Bug ID CSCuy55803. CWE-20
 Improper Input Validation  		CVE-2016-1419 2024-11-21 11:46 2016-06-10 Show GitHub Exploit DB Packet Storm
268244 7.5 HIGH
Network 		cisco ip_phone_8800_series_firmware A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1421 2024-11-21 11:46 2016-06-10 Show GitHub Exploit DB Packet Storm
268245 5.5 MEDIUM
Local 		canonical ubuntu_linux
lxd 		LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container di… CWE-200
Information Exposure 		CVE-2016-1582 2024-11-21 11:46 2016-06-10 Show GitHub Exploit DB Packet Storm
268246 5.5 MEDIUM
Local 		canonical ubuntu_linux
lxd 		LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecifi… CWE-284
Improper Access Control 		CVE-2016-1581 2024-11-21 11:46 2016-06-10 Show GitHub Exploit DB Packet Storm
268247 7.8 HIGH
Local 		cisco aironet_access_point_software_ Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters, aka Bug I… CWE-20
 Improper Input Validation  		CVE-2016-1418 2024-11-21 11:46 2016-06-8 Show GitHub Exploit DB Packet Storm
268248 7.5 HIGH
Network 		clamav
cisco 		clamav
email_security_appliance
web_security_appliance 		libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1405 2024-11-21 11:46 2016-06-8 Show GitHub Exploit DB Packet Storm
268249 8.8 HIGH
Network 		google
debian
canonical
redhat
suse
opensuse 		chrome
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse 		Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. NVD-CWE-noinfo
CVE-2016-1703 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268250 6.5 MEDIUM
Network 		debian
canonical
redhat
suse
opensuse
google 		debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse
chrome 		The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1702 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm