Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242781 7.5 危険 graugon - Graugon PHP Article Publisher の admin.php における管理者用アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-4808 2012-06-26 16:19 2010-04-23 Show GitHub Exploit DB Packet Storm
242782 7.5 危険 graugon - Graugon PHP Article Publisher における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4807 2012-06-26 16:19 2010-04-23 Show GitHub Exploit DB Packet Storm
242783 7.5 危険 digitalinterchange - Digital Interchange Document Library の admin/save_user.asp における管理者の資格情報を変更される脆弱性 CWE-287
不適切な認証 		CVE-2009-4806 2012-06-26 16:19 2010-04-23 Show GitHub Exploit DB Packet Storm
242784 7.5 危険 TYPO3 Association
andreas schwarzkopf		 - TYPO3 の a21glossary 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4803 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
242785 5 警告 diskos - Diskos CMS におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4799 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
242786 7.5 危険 diskos - Diskos CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4798 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
242787 7.5 危険 glFusion - glFusion の private/system/classes/listfactory.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4796 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
242788 7.5 危険 community cms - Community CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4794 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
242789 7.5 危険 bhavesh chauhan
Joomla!		 - Joomla! 用の Quick News コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4785 2012-06-26 16:19 2010-04-21 Show GitHub Exploit DB Packet Storm
242790 9.3 危険 Blizzard Entertainment, Inc. - Warcraft III: The Frozen Throne の JASS スクリプトインタプリタにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4768 2012-06-26 16:19 2010-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268441 5.3 MEDIUM
Network 		cisco firepower_management_center The device login page in Cisco FirePOWER Management Center 5.3 through 6.0.0.1 allows remote attackers to obtain potentially sensitive software-version information by reading help files, aka Bug ID C… CWE-200
Information Exposure 		CVE-2016-1342 2024-11-21 11:46 2016-02-26 Show GitHub Exploit DB Packet Storm
268442 8.8 HIGH
Network 		cisco application_control_engine_software The Device Manager GUI in Cisco Application Control Engine (ACE) 4710 A5 before A5(3.1) allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with … CWE-78
OS Command  		CVE-2016-1297 2024-11-21 11:46 2016-02-26 Show GitHub Exploit DB Packet Storm
268443 9.8 CRITICAL
Network 		cisco nx-os Cisco NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID … CWE-255
CWE-264
Credentials Management
Permissions, Privileges, and Access Controls 		CVE-2016-1341 2024-11-21 11:46 2016-02-24 Show GitHub Exploit DB Packet Storm
268444 9.8 CRITICAL
Network 		google
novell
opensuse
debian 		chrome
suse_package_hub_for_suse_linux_enterprise
leap
opensuse
debian_linux 		Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1629 2024-11-21 11:46 2016-02-22 Show GitHub Exploit DB Packet Storm
268445 6.3 MEDIUM
Network 		google
debian 		chrome
debian_linux 		pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of se… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1628 2024-11-21 11:46 2016-02-21 Show GitHub Exploit DB Packet Storm
268446 7.5 HIGH
Network 		cisco asr_5000_series_software The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote auth… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1335 2024-11-21 11:46 2016-02-20 Show GitHub Exploit DB Packet Storm
268447 5.3 MEDIUM
Network 		cisco small_business_wireless_access_points_firmware Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457. CWE-20
 Improper Input Validation  		CVE-2016-1334 2024-11-21 11:46 2016-02-18 Show GitHub Exploit DB Packet Storm
268448 6.5 MEDIUM
Network 		cisco ios Cisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service (device reload) via an SNMP request for unspecified BRIDGE MIB OI… CWE-399
 Resource Management Errors 		CVE-2016-1333 2024-11-21 11:46 2016-02-18 Show GitHub Exploit DB Packet Storm
268449 6.1 MEDIUM
Network 		sun opensolaris Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID C… CWE-79
Cross-site Scripting 		CVE-2016-1331 2024-11-21 11:46 2016-02-16 Show GitHub Exploit DB Packet Storm
268450 6.5 MEDIUM
Adjacent 		zzinc keymouse_firmware Cisco IOS 15.2(4)E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service (device reload) via crafted Cisco Discovery Protocol (CDP) packets, aka Bug ID CSCuy27746. CWE-399
 Resource Management Errors 		CVE-2016-1330 2024-11-21 11:46 2016-02-16 Show GitHub Exploit DB Packet Storm