Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242861	4.3	警告	cromosoft	-	Cromosoft Technologies Facil Helpdesk Lite の kbase/kbase.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4544	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242862	6.8	警告	cromosoft	-	Cromosoft Technologies Facil Helpdesk Lite の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-4543	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242863	6.8	警告	bpowerhouse	-	Mini CMS の page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4540	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242864	4.3	警告	Alkacon Software	-	OpenCMS OAMP Comments モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4505	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

242865	5	警告	Boa	-	Boa におけるウィンドウのタイトルを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2009-4496	2012-06-26 16:19	2010-01-13	Show	GitHub Exploit DB Packet Storm

242866	5	警告	AOL	-	AOLserver におけるファイルを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2009-4494	2012-06-26 16:19	2010-01-13	Show	GitHub Exploit DB Packet Storm

242867	5	警告	ACME Laboratories	-	thttpd におけるファイルを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2009-4491	2012-06-26 16:19	2010-01-13	Show	GitHub Exploit DB Packet Storm

242868	5	警告	ACME Laboratories	-	mini_httpd におけるファイルを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2009-4490	2012-06-26 16:19	2010-01-13	Show	GitHub Exploit DB Packet Storm

242869	5	警告	Cherokee Project	-	Cherokee の header.c におけるウィンドウのタイトルを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2009-4489	2012-06-26 16:19	2010-01-13	Show	GitHub Exploit DB Packet Storm

242870	4.3	警告	bloofox	-	BloofoxCMS の search.5.html におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4522	2012-06-26 16:19	2009-12-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267721	6.5	MEDIUM Network	libdwarf_project	libdwarf	The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted elf file.	CWE-787 Out-of-bounds Write	CVE-2016-2050	2024-11-21 11:47	2017-02-1	Show	GitHub Exploit DB Packet Storm

267722	5.5	MEDIUM Local	samsung	knox	Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service.	CWE-284 Improper Access Control	CVE-2016-1920	2024-11-21 11:47	2017-01-28	Show	GitHub Exploit DB Packet Storm

267723	4.7	MEDIUM Local	samsung	knox	Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.	CWE-310 CWE-200 Cryptographic Issues Information Exposure	CVE-2016-1919	2024-11-21 11:47	2017-01-28	Show	GitHub Exploit DB Packet Storm

267724	9.8	CRITICAL Network	lha_for_unix_project	lha_for_unix	Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2016-1925	2024-11-21 11:47	2017-01-24	Show	GitHub Exploit DB Packet Storm

267725	7.4	HIGH Network	hexchat_project	hexchat	Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.	CWE-22 Path Traversal	CVE-2016-2087	2024-11-21 11:47	2017-01-19	Show	GitHub Exploit DB Packet Storm

267726	9.8	CRITICAL Network	fedoraproject freedesktop debian canonical	fedora libbsd debian_linux ubuntu_linux	Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2090	2024-11-21 11:47	2017-01-14	Show	GitHub Exploit DB Packet Storm

267727	5.5	MEDIUM Local	qemu debian	qemu debian_linux	QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the in…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2016-1981	2024-11-21 11:47	2016-12-30	Show	GitHub Exploit DB Packet Storm

267728	5.5	MEDIUM Local	qemu debian	qemu debian_linux	QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp i…	CWE-476 NULL Pointer Dereference	CVE-2016-1922	2024-11-21 11:47	2016-12-30	Show	GitHub Exploit DB Packet Storm

267729	9.8	CRITICAL Network	hp openssl oracle	icewall_sso icewall_mcrp icewall_sso_agent_option icewall_federation_agent openssl linux	The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and…	CWE-787 Out-of-bounds Write	CVE-2016-2182	2024-11-21 11:47	2016-09-16	Show	GitHub Exploit DB Packet Storm

267730	7.5	HIGH Network	openssl oracle	openssl linux	The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cau…	CWE-189 Numeric Errors	CVE-2016-2181	2024-11-21 11:47	2016-09-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed