Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242861 4.3 警告 cromosoft - Cromosoft Technologies Facil Helpdesk Lite の kbase/kbase.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4544 2012-06-26 16:19 2010-01-4 Show GitHub Exploit DB Packet Storm
242862 6.8 警告 cromosoft - Cromosoft Technologies Facil Helpdesk Lite の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4543 2012-06-26 16:19 2010-01-4 Show GitHub Exploit DB Packet Storm
242863 6.8 警告 bpowerhouse - Mini CMS の page.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4540 2012-06-26 16:19 2010-01-4 Show GitHub Exploit DB Packet Storm
242864 4.3 警告 Alkacon Software - OpenCMS OAMP Comments モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4505 2012-06-26 16:19 2010-03-26 Show GitHub Exploit DB Packet Storm
242865 5 警告 Boa - Boa におけるウィンドウのタイトルを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4496 2012-06-26 16:19 2010-01-13 Show GitHub Exploit DB Packet Storm
242866 5 警告 AOL - AOLserver におけるファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4494 2012-06-26 16:19 2010-01-13 Show GitHub Exploit DB Packet Storm
242867 5 警告 ACME Laboratories - thttpd におけるファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4491 2012-06-26 16:19 2010-01-13 Show GitHub Exploit DB Packet Storm
242868 5 警告 ACME Laboratories - mini_httpd におけるファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4490 2012-06-26 16:19 2010-01-13 Show GitHub Exploit DB Packet Storm
242869 5 警告 Cherokee Project - Cherokee の header.c におけるウィンドウのタイトルを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4489 2012-06-26 16:19 2010-01-13 Show GitHub Exploit DB Packet Storm
242870 4.3 警告 bloofox - BloofoxCMS の search.5.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4522 2012-06-26 16:19 2009-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268171 6.1 MEDIUM
Network 		cisco identity_services_engine_software Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497. CWE-79
Cross-site Scripting 		CVE-2016-1485 2024-11-21 11:46 2016-08-22 Show GitHub Exploit DB Packet Storm
268172 7.5 HIGH
Network 		cisco ip_phone_8800_series_firmware Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP request, aka Bug ID CSCuz03038. CWE-20
 Improper Input Validation  		CVE-2016-1479 2024-11-21 11:46 2016-08-22 Show GitHub Exploit DB Packet Storm
268173 5.4 MEDIUM
Network 		cisco ip_phone_8800_series_firmware Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID … CWE-79
Cross-site Scripting 		CVE-2016-1476 2024-11-21 11:46 2016-08-22 Show GitHub Exploit DB Packet Storm
268174 8.8 HIGH
Network 		cisco firepower_management_center The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1458 2024-11-21 11:46 2016-08-19 Show GitHub Exploit DB Packet Storm
268175 8.8 HIGH
Network 		cisco firepower_management_center The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Servic… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1457 2024-11-21 11:46 2016-08-19 Show GitHub Exploit DB Packet Storm
268176 8.8 HIGH
Network 		cisco application_policy_infrastructure_controller_enterprise_module The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafte… CWE-20
 Improper Input Validation  		CVE-2016-1365 2024-11-21 11:46 2016-08-19 Show GitHub Exploit DB Packet Storm
268177 7.5 HIGH
Network 		cisco ios Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service (interface wedge) by sending many cr… CWE-20
 Improper Input Validation  		CVE-2016-1478 2024-11-21 11:46 2016-08-8 Show GitHub Exploit DB Packet Storm
268178 4.3 MEDIUM
Network 		cisco prime_infrastructure Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a cra… CWE-284
Improper Access Control 		CVE-2016-1474 2024-11-21 11:46 2016-08-8 Show GitHub Exploit DB Packet Storm
268179 8.8 HIGH
Network 		cisco telepresence_video_communication_server The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCu… CWE-78
OS Command  		CVE-2016-1468 2024-11-21 11:46 2016-08-8 Show GitHub Exploit DB Packet Storm
268180 7.5 HIGH
Network 		cisco unified_communications_manager_im_and_presence_service Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of serv… CWE-399
 Resource Management Errors 		CVE-2016-1466 2024-11-21 11:46 2016-08-8 Show GitHub Exploit DB Packet Storm