Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242851	9.3	危険	awingsoft	-	AwingSoft Awakening Web3D Player などの WindsPlayerIE.View.1 ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4588	2012-06-26 16:19	2010-01-7	Show	GitHub Exploit DB Packet Storm

242852	5	警告	Cherokee Project	-	Cherokee Web Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4587	2012-06-26 16:19	2010-01-7	Show	GitHub Exploit DB Packet Storm

242853	5	警告	ASP indir	-	UranyumSoft Listing Service におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4585	2012-06-26 16:19	2010-01-6	Show	GitHub Exploit DB Packet Storm

242854	7.5	危険	dbmasters	-	dB Masters Multimedia Links Directory の admin.php における管理者アクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2009-4584	2012-06-26 16:19	2010-01-6	Show	GitHub Exploit DB Packet Storm

242855	4.3	警告	FacileForms Joomla! Mambo Foundation	-	Mambo および Joomla! 用の Facileforms コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4578	2012-06-26 16:19	2010-01-6	Show	GitHub Exploit DB Packet Storm

242856	4.3	警告	Drupal	-	Drupal 用の Randomizer モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4602	2012-06-26 16:19	2009-12-9	Show	GitHub Exploit DB Packet Storm

242857	7.5	危険	cmstactics Joomla!	-	Joomla! の beeheard コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4576	2012-06-26 16:19	2010-01-6	Show	GitHub Exploit DB Packet Storm

242858	7.5	危険	elkagroup	-	elkagroup Image Gallery における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4569	2012-06-26 16:19	2010-01-5	Show	GitHub Exploit DB Packet Storm

242859	4.3	警告	Snitz	-	Snitz Forums 2000 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4554	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242860	9.3	危険	cdmi	-	A2 Media Player Pro におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4549	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268351	9.8	CRITICAL Network	cisco	wireless_lan_controller_software	Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers …	CWE-399 Resource Management Errors	CVE-2016-1363	2024-11-21 11:46	2016-04-21	Show	GitHub Exploit DB Packet Storm

268352	7.5	HIGH Network	cisco	aireos	Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka …	CWE-399 Resource Management Errors	CVE-2016-1362	2024-11-21 11:46	2016-04-21	Show	GitHub Exploit DB Packet Storm

268353	7.5	HIGH Network	cisco	ios ios_xe	The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-1384	2024-11-21 11:46	2016-04-21	Show	GitHub Exploit DB Packet Storm

268354	9.8	CRITICAL Network	debian suse opensuse canonical google	debian_linux linux_enterprise leap ubuntu_linux chrome	Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.	NVD-CWE-noinfo	CVE-2016-1659	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

268355	4.3	MEDIUM Network	novell opensuse google debian	suse_package_hub_for_suse_linux_enterprise leap chrome debian_linux	The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and o…	CWE-200 CWE-284 Information Exposure Improper Access Control	CVE-2016-1658	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

268356	4.3	MEDIUM Network	debian novell opensuse google	debian_linux suse_package_hub_for_suse_linux_enterprise leap chrome	The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which…	CWE-254 7PK - Security Features	CVE-2016-1657	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

268357	7.5	HIGH Network	google suse opensuse	chrome linux_enterprise leap	The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors.	CWE-284 Improper Access Control	CVE-2016-1656	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

268358	8.8	HIGH Network	debian suse opensuse google canonical	debian_linux linux_enterprise leap chrome ubuntu_linux	Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or pos…	NVD-CWE-Other	CVE-2016-1655	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

268359	6.5	MEDIUM Network	debian suse opensuse google canonical	debian_linux linux_enterprise leap chrome ubuntu_linux	The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unk…	CWE-20 Improper Input Validation	CVE-2016-1654	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

268360	8.8	HIGH Network	debian suse opensuse canonical google	debian_linux linux_enterprise leap ubuntu_linux chrome	The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecifie…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1653	2024-11-21 11:46	2016-04-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed