Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242791	5	警告	cnr.somee	-	CNR Hikaye Portal におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4765	2012-06-26 16:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

242792	9.3	危険	マイクロソフトアドビシステムズ	-	Adobe Reader におけるユーザに任意のコードを実行させる脆弱性	CWE-94 コード・インジェクション	CVE-2009-4764	2012-06-26 16:19	2010-04-5	Show	GitHub Exploit DB Packet Storm

242793	9.3	危険	dicas	-	dicas Mpegable Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4758	2012-06-26 16:19	2010-03-29	Show	GitHub Exploit DB Packet Storm

242794	9.3	危険	evils-world	-	BrotherSoft EW-MusicPlayer におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4757	2012-06-26 16:19	2010-03-29	Show	GitHub Exploit DB Packet Storm

242795	9.3	危険	beatport	-	Beatport Player の TraktorBeatport.exe におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4756	2012-06-26 16:19	2010-03-29	Show	GitHub Exploit DB Packet Storm

242796	7.5	危険	andrew charlton WordPress.org	-	WordPress の My Category Order プラグインの mycategoryorder.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4748	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

242797	4.3	警告	dreamlevels	-	Dreamlevels DreamPoll の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4746	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

242798	7.5	危険	dreamlevels	-	Dreamlevels DreamPoll の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4745	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

242799	4.3	警告	AfterLogic	-	AfterLogic WebMail Pro の history-storage.aspx におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4743	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

242800	7.5	危険	Docebo	-	Docebo における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4742	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268051	5.9	MEDIUM Network	mariadb oracle opensuse redhat debian canonical	mariadb linux mysql leap enterprise_linux debian_linux ubuntu_linux	The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 …	CWE-254 7PK - Security Features	CVE-2016-2047	2024-11-21 11:47	2016-01-28	Show	GitHub Exploit DB Packet Storm

268052	7.5	HIGH Network	privoxy	privoxy	The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header.	CWE-20 Improper Input Validation	CVE-2016-1983	2024-11-21 11:47	2016-01-28	Show	GitHub Exploit DB Packet Storm

268053	7.5	HIGH Network	privoxy	privoxy	The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content.	CWE-20 Improper Input Validation	CVE-2016-1982	2024-11-21 11:47	2016-01-28	Show	GitHub Exploit DB Packet Storm

268054	6.5	MEDIUM Network	uclouvain	openjpeg	The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1924	2024-11-21 11:47	2016-01-28	Show	GitHub Exploit DB Packet Storm

268055	6.5	MEDIUM Network	uclouvain	openjpeg	Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafte…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1923	2024-11-21 11:47	2016-01-28	Show	GitHub Exploit DB Packet Storm

268056	9.8	CRITICAL Network	lexmark	printer_firmware	Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypa…	CWE-264 CWE-254 Permissions, Privileges, and Access Controls 7PK - Security Features	CVE-2016-1896	2024-11-21 11:47	2016-01-27	Show	GitHub Exploit DB Packet Storm

268057	6.1	MEDIUM Network	greenbone fedoraproject	greenbone_security_assistant greenbone_os fedora	Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_t…	CWE-79 Cross-site Scripting	CVE-2016-1926	2024-11-21 11:47	2016-01-27	Show	GitHub Exploit DB Packet Storm

268058	7.6	HIGH Network	harfbuzz_project google	harfbuzz chrome	Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted dat…	NVD-CWE-noinfo	CVE-2016-2052	2024-11-21 11:47	2016-01-25	Show	GitHub Exploit DB Packet Storm

268059	9.8	CRITICAL Network	google redhat	chrome enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary enterprise_linux_workstation_supplementary enterprise_linux_server_supplementary_eus	Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via unkno…	NVD-CWE-noinfo	CVE-2016-2051	2024-11-21 11:47	2016-01-25	Show	GitHub Exploit DB Packet Storm

268060	9.8	CRITICAL Network	harman	amx_firmware	The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a hardcoded password for the 1MB@tMaN account, which makes it easier for remote attackers to obtain access v…	CWE-255 Credentials Management	CVE-2016-1984	2024-11-21 11:47	2016-01-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed