Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242811 4.3 警告 alexandre amaral - XOOPS Celepar の quiz モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4714 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242812 4.3 警告 alexandre amaral - XOOPS Celepar の Qas モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4713 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242813 7.5 危険 dirk maiwert
TYPO3 Association		 - TYPO3 の datamints_newsticker 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4709 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242814 7.5 危険 alexandre amaral - XOOPS Celepar の Qas モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4698 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242815 7.5 危険 grafxsoftware - GraFX MiniCWB における PHP リモートファイルインクルーションの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4693 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
242816 4.3 警告 edgephp - EZodiak の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4684 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
242817 4.3 警告 frank-karau - phpFK PHP Forum ohne の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4677 2012-06-26 16:19 2010-03-8 Show GitHub Exploit DB Packet Storm
242818 9.3 危険 JetAudio - jetAudio の JetCast.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4676 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
242819 7.5 危険 WordPress.org
grupenet		 - WordPress 用 WP-Lytebox プラグインの main.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4672 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
242820 7.5 危険 beaussier - RoomPHPlanning の Login.php における管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-4671 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268421 4.3 MEDIUM
Network 		google chrome The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for … CWE-17
Code 		CVE-2016-1640 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm
268422 9.8 CRITICAL
Network 		google chrome Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remo… NVD-CWE-Other
CVE-2016-1639 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm
268423 6.3 MEDIUM
Network 		google chrome extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass inte… CWE-284
Improper Access Control 		CVE-2016-1638 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm
268424 6.5 MEDIUM
Network 		google chrome The SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles arctangent calculations, which allows remote attackers to obtain se… CWE-200
Information Exposure 		CVE-2016-1637 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm
268425 9.8 CRITICAL
Network 		google chrome The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instea… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1636 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm
268426 9.8 CRITICAL
Network 		google chrome extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, … NVD-CWE-Other
CVE-2016-1635 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm
268427 8.8 HIGH
Network 		google chrome Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows rem… NVD-CWE-Other
CVE-2016-1634 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm
268428 9.8 CRITICAL
Network 		google chrome Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. NVD-CWE-Other
CVE-2016-1633 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm
268429 8.8 HIGH
Network 		google chrome The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript co… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1632 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm
268430 8.8 HIGH
Network 		google chrome The PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper/ppb_flash_message_loop_impl.cc in the Pepper plugin in Google Chrome before 49.0.2623.75 mishandles nested message loop… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1631 2024-11-21 11:46 2016-03-6 Show GitHub Exploit DB Packet Storm