Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242811 4.3 警告 alexandre amaral - XOOPS Celepar の quiz モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4714 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242812 4.3 警告 alexandre amaral - XOOPS Celepar の Qas モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4713 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242813 7.5 危険 dirk maiwert
TYPO3 Association		 - TYPO3 の datamints_newsticker 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4709 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242814 7.5 危険 alexandre amaral - XOOPS Celepar の Qas モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4698 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242815 7.5 危険 grafxsoftware - GraFX MiniCWB における PHP リモートファイルインクルーションの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4693 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
242816 4.3 警告 edgephp - EZodiak の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4684 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
242817 4.3 警告 frank-karau - phpFK PHP Forum ohne の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4677 2012-06-26 16:19 2010-03-8 Show GitHub Exploit DB Packet Storm
242818 9.3 危険 JetAudio - jetAudio の JetCast.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4676 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
242819 7.5 危険 WordPress.org
grupenet		 - WordPress 用 WP-Lytebox プラグインの main.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4672 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
242820 7.5 危険 beaussier - RoomPHPlanning の Login.php における管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-4671 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268171 6.1 MEDIUM
Network 		cisco identity_services_engine_software Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497. CWE-79
Cross-site Scripting 		CVE-2016-1485 2024-11-21 11:46 2016-08-22 Show GitHub Exploit DB Packet Storm
268172 7.5 HIGH
Network 		cisco ip_phone_8800_series_firmware Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP request, aka Bug ID CSCuz03038. CWE-20
 Improper Input Validation  		CVE-2016-1479 2024-11-21 11:46 2016-08-22 Show GitHub Exploit DB Packet Storm
268173 5.4 MEDIUM
Network 		cisco ip_phone_8800_series_firmware Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID … CWE-79
Cross-site Scripting 		CVE-2016-1476 2024-11-21 11:46 2016-08-22 Show GitHub Exploit DB Packet Storm
268174 8.8 HIGH
Network 		cisco firepower_management_center The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1458 2024-11-21 11:46 2016-08-19 Show GitHub Exploit DB Packet Storm
268175 8.8 HIGH
Network 		cisco firepower_management_center The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Servic… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1457 2024-11-21 11:46 2016-08-19 Show GitHub Exploit DB Packet Storm
268176 8.8 HIGH
Network 		cisco application_policy_infrastructure_controller_enterprise_module The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafte… CWE-20
 Improper Input Validation  		CVE-2016-1365 2024-11-21 11:46 2016-08-19 Show GitHub Exploit DB Packet Storm
268177 7.5 HIGH
Network 		cisco ios Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service (interface wedge) by sending many cr… CWE-20
 Improper Input Validation  		CVE-2016-1478 2024-11-21 11:46 2016-08-8 Show GitHub Exploit DB Packet Storm
268178 4.3 MEDIUM
Network 		cisco prime_infrastructure Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a cra… CWE-284
Improper Access Control 		CVE-2016-1474 2024-11-21 11:46 2016-08-8 Show GitHub Exploit DB Packet Storm
268179 8.8 HIGH
Network 		cisco telepresence_video_communication_server The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCu… CWE-78
OS Command  		CVE-2016-1468 2024-11-21 11:46 2016-08-8 Show GitHub Exploit DB Packet Storm
268180 7.5 HIGH
Network 		cisco unified_communications_manager_im_and_presence_service Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of serv… CWE-399
 Resource Management Errors 		CVE-2016-1466 2024-11-21 11:46 2016-08-8 Show GitHub Exploit DB Packet Storm