Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242811	7.8	危険	2wire	-	複数の 2wire 製品の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-3962	2012-06-26 16:18	2009-11-17	Show	GitHub Exploit DB Packet Storm

242812	4.3	警告	bract	-	Bractus SunTrack におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3950	2012-06-26 16:18	2009-11-16	Show	GitHub Exploit DB Packet Storm

242813	4.3	警告	JetAudio	-	JetAudio の COWON Media Center におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3948	2012-06-26 16:18	2009-11-16	Show	GitHub Exploit DB Packet Storm

242814	5.8	警告	シトリックス・システムズ	-	Citrix Online プラグインなどの製品における SSL/TLS サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3936	2012-06-26 16:18	2009-11-9	Show	GitHub Exploit DB Packet Storm

242815	9.3	危険	file project	-	Christos Zoulas の file における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3930	2012-06-26 16:18	2009-11-10	Show	GitHub Exploit DB Packet Storm

242816	6.8	警告	Drupal chad phillips	-	Drupal のモジュールの User Protect モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-3922	2012-06-26 16:18	2009-11-9	Show	GitHub Exploit DB Packet Storm

242817	4	警告	Ezra Barnett Gildesgame Drupal	-	Drupal の Smartqueue_og モジュールにおける任意の基本的なグループ名を発見される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3921	2012-06-26 16:18	2009-11-4	Show	GitHub Exploit DB Packet Storm

242818	4.3	警告	Drupal greg knaddison	-	S5 Presentation Player モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3917	2012-06-26 16:18	2009-11-4	Show	GitHub Exploit DB Packet Storm

242819	9.3	危険	The GIMP Team	-	GIMP の plug-ins/file-psd/psd-load.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3909	2012-06-26 16:18	2009-11-16	Show	GitHub Exploit DB Packet Storm

242820	4.3	警告	ecouriersoftware	-	e-Courier CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3905	2012-06-26 16:18	2009-11-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267611	9.8	CRITICAL Network	hp	vertica	The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary …	CWE-77 Command Injection	CVE-2016-2002	2024-11-21 11:47	2016-04-21	Show	GitHub Exploit DB Packet Storm

267612	7.5	HIGH Network	fedoraproject uninett	fedora mod_auth_mellon	The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service (worker process crash, web server de…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2146	2024-11-21 11:47	2016-04-15	Show	GitHub Exploit DB Packet Storm

267613	7.5	HIGH Network	fedoraproject uninett	fedora mod_auth_mellon	The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote attackers to cause a denial of service (segmen…	CWE-20 Improper Input Validation	CVE-2016-2145	2024-11-21 11:47	2016-04-15	Show	GitHub Exploit DB Packet Storm

267614	7.6	HIGH Network	vmware	vcenter_server vcloud_director vcloud_automation_identity_appliance	Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles ses…	CWE-287 Improper Authentication	CVE-2016-2076	2024-11-21 11:47	2016-04-15	Show	GitHub Exploit DB Packet Storm

267615	6.1	MEDIUM Network	redhat	satellite	Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter to systems/…	CWE-79 Cross-site Scripting	CVE-2016-2103	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

267616	5.4	MEDIUM Network	debian xymon	debian_linux xymon	Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is…	CWE-79 Cross-site Scripting	CVE-2016-2058	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

267617	3.3	LOW Local	xymon debian	xymon debian_linux	lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to th…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2057	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

267618	8.8	HIGH Network	xymon debian	xymon debian_linux	xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) …	CWE-77 Command Injection	CVE-2016-2056	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

267619	7.5	HIGH Network	xymon debian	xymon debian_linux	xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command.	CWE-200 Information Exposure	CVE-2016-2055	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

267620	9.8	CRITICAL Network	debian xymon	debian_linux xymon	Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2054	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm