Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242811 4.3 警告 alexandre amaral - XOOPS Celepar の quiz モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4714 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242812 4.3 警告 alexandre amaral - XOOPS Celepar の Qas モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4713 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242813 7.5 危険 dirk maiwert
TYPO3 Association		 - TYPO3 の datamints_newsticker 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4709 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242814 7.5 危険 alexandre amaral - XOOPS Celepar の Qas モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4698 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242815 7.5 危険 grafxsoftware - GraFX MiniCWB における PHP リモートファイルインクルーションの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4693 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
242816 4.3 警告 edgephp - EZodiak の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4684 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
242817 4.3 警告 frank-karau - phpFK PHP Forum ohne の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4677 2012-06-26 16:19 2010-03-8 Show GitHub Exploit DB Packet Storm
242818 9.3 危険 JetAudio - jetAudio の JetCast.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4676 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
242819 7.5 危険 WordPress.org
grupenet		 - WordPress 用 WP-Lytebox プラグインの main.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4672 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
242820 7.5 危険 beaussier - RoomPHPlanning の Login.php における管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-4671 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268071 5.4 MEDIUM
Network 		dolibarr dolibarr Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lastname, (2) firstname, (3) email, (… CWE-79
Cross-site Scripting 		CVE-2016-1912 2024-11-21 11:47 2016-01-16 Show GitHub Exploit DB Packet Storm
268072 6.1 MEDIUM
Network 		sap netweaver Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) Runtime Workbench (RWB) or (2) Pm… CWE-79
Cross-site Scripting 		CVE-2016-1911 2024-11-21 11:47 2016-01-16 Show GitHub Exploit DB Packet Storm
268073 5.3 MEDIUM
Network 		sap netweaver The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290. CWE-200
Information Exposure 		CVE-2016-1910 2024-11-21 11:47 2016-01-16 Show GitHub Exploit DB Packet Storm
268074 9.8 CRITICAL
Network 		fortinet fortios Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4.1.11, 4.2.x before 4.2.16, 4.3.x before 4.3.17 a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1909 2024-11-21 11:47 2016-01-16 Show GitHub Exploit DB Packet Storm
268075 5.5 MEDIUM
Local 		ffmpeg
canonical
opensuse 		ffmpeg
ubuntu_linux
leap 		FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP reques… CWE-200
Information Exposure 		CVE-2016-1898 2024-11-21 11:47 2016-01-15 Show GitHub Exploit DB Packet Storm
268076 5.5 MEDIUM
Local 		ffmpeg
canonical
opensuse 		ffmpeg
ubuntu_linux
leap 		FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request… CWE-200
Information Exposure 		CVE-2016-1897 2024-11-21 11:47 2016-01-15 Show GitHub Exploit DB Packet Storm
268077 9.8 CRITICAL
Network 		debian duck duck before 0.10 did not properly handle loading of untrusted code from the current directory. NVD-CWE-noinfo
CVE-2016-1239 2024-11-21 11:46 2022-02-20 Show GitHub Exploit DB Packet Storm
268078 8.8 HIGH
Network 		lexmark markvision_enterprise Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization. CWE-502
 Deserialization of Untrusted Data 		CVE-2016-1487 2024-11-21 11:46 2020-03-10 Show GitHub Exploit DB Packet Storm
268079 3.3 LOW
Local 		nghttp2
fedoraproject 		nghttp2
fedora 		nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion). CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-1544 2024-11-21 11:46 2020-02-7 Show GitHub Exploit DB Packet Storm
268080 7.5 HIGH
Network 		microfocus identity_manager The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability. CWE-200
Information Exposure 		CVE-2016-1600 2024-11-21 11:46 2019-05-10 Show GitHub Exploit DB Packet Storm