Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242811	4.3	警告	alexandre amaral	-	XOOPS Celepar の quiz モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4714	2012-06-26 16:19	2010-03-15	Show	GitHub Exploit DB Packet Storm

242812	4.3	警告	alexandre amaral	-	XOOPS Celepar の Qas モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4713	2012-06-26 16:19	2010-03-15	Show	GitHub Exploit DB Packet Storm

242813	7.5	危険	dirk maiwert TYPO3 Association	-	TYPO3 の datamints_newsticker 拡張における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4709	2012-06-26 16:19	2010-03-15	Show	GitHub Exploit DB Packet Storm

242814	7.5	危険	alexandre amaral	-	XOOPS Celepar の Qas モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4698	2012-06-26 16:19	2010-03-15	Show	GitHub Exploit DB Packet Storm

242815	7.5	危険	grafxsoftware	-	GraFX MiniCWB における PHP リモートファイルインクルーションの脆弱性	CWE-94 コード・インジェクション	CVE-2009-4693	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

242816	4.3	警告	edgephp	-	EZodiak の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4684	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

242817	4.3	警告	frank-karau	-	phpFK PHP Forum ohne の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4677	2012-06-26 16:19	2010-03-8	Show	GitHub Exploit DB Packet Storm

242818	9.3	危険	JetAudio	-	jetAudio の JetCast.exe におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4676	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

242819	7.5	危険	WordPress.org grupenet	-	WordPress 用 WP-Lytebox プラグインの main.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4672	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

242820	7.5	危険	beaussier	-	RoomPHPlanning の Login.php における管理アクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2009-4671	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267711	4.7	MEDIUM Local	samsung	knox	Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.	CWE-310 CWE-200 Cryptographic Issues Information Exposure	CVE-2016-1919	2024-11-21 11:47	2017-01-28	Show	GitHub Exploit DB Packet Storm

267712	9.8	CRITICAL Network	lha_for_unix_project	lha_for_unix	Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2016-1925	2024-11-21 11:47	2017-01-24	Show	GitHub Exploit DB Packet Storm

267713	7.4	HIGH Network	hexchat_project	hexchat	Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.	CWE-22 Path Traversal	CVE-2016-2087	2024-11-21 11:47	2017-01-19	Show	GitHub Exploit DB Packet Storm

267714	9.8	CRITICAL Network	fedoraproject freedesktop debian canonical	fedora libbsd debian_linux ubuntu_linux	Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2090	2024-11-21 11:47	2017-01-14	Show	GitHub Exploit DB Packet Storm

267715	5.5	MEDIUM Local	qemu debian	qemu debian_linux	QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the in…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2016-1981	2024-11-21 11:47	2016-12-30	Show	GitHub Exploit DB Packet Storm

267716	5.5	MEDIUM Local	qemu debian	qemu debian_linux	QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp i…	CWE-476 NULL Pointer Dereference	CVE-2016-1922	2024-11-21 11:47	2016-12-30	Show	GitHub Exploit DB Packet Storm

267717	9.8	CRITICAL Network	hp openssl oracle	icewall_sso icewall_mcrp icewall_sso_agent_option icewall_federation_agent openssl linux	The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and…	CWE-787 Out-of-bounds Write	CVE-2016-2182	2024-11-21 11:47	2016-09-16	Show	GitHub Exploit DB Packet Storm

267718	7.5	HIGH Network	openssl oracle	openssl linux	The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cau…	CWE-189 Numeric Errors	CVE-2016-2181	2024-11-21 11:47	2016-09-16	Show	GitHub Exploit DB Packet Storm

267719	7.5	HIGH Network	openssl oracle	openssl linux	The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial …	CWE-399 Resource Management Errors	CVE-2016-2179	2024-11-21 11:47	2016-09-16	Show	GitHub Exploit DB Packet Storm

267720	7.5	HIGH Network	redhat python cisco openssl oracle nodejs	enterprise_linux jboss_enterprise_application_platform jboss_enterprise_web_server jboss_web_server python content_security_management_appliance openssl database node.js	The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for re…	CWE-200 Information Exposure	CVE-2016-2183	2024-11-21 11:47	2016-09-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed