Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242871 4.3 警告 Eclipse Foundation - BIRT の birt-viewer/run におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4521 2012-06-26 16:19 2009-12-17 Show GitHub Exploit DB Packet Storm
242872 3.5 注意 Drupal
astha bhatnagar		 - Drupal のモジュールの OpenSocial Shindig-Integrator モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4514 2012-06-26 16:19 2009-12-31 Show GitHub Exploit DB Packet Storm
242873 9.3 危険 AzeoTech, Inc. - AzeoTech DAQFactory の Web サービスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4480 2012-06-26 16:19 2009-12-30 Show GitHub Exploit DB Packet Storm
242874 4.3 警告 Episerver - Ektron CMS400.NET におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4473 2012-06-26 16:19 2009-12-30 Show GitHub Exploit DB Packet Storm
242875 7.5 危険 freeschool - FreeSchool における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4471 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242876 7.5 危険 dvbbs - DVBBS の boardrule.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4470 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242877 4.3 警告 giombetti - phpPowerCards の pagenumber.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4469 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242878 4.3 警告 deluxebb - DeluxeBB の misc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4468 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242879 4 警告 deluxebb - DeluxeBB の misc.php におけるアカウント登録される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4467 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242880 5 警告 deluxebb - DeluxeBB における重要な情報を取得される取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-4466 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267311 3.3 LOW
Local 		ibm qradar_security_information_and_event_manager IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by writing to a file. CWE-275
 Permission Issues 		CVE-2016-2877 2024-11-21 11:48 2016-12-1 Show GitHub Exploit DB Packet Storm
267312 7.5 HIGH
Network 		ibm qradar_security_information_and_event_manager IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access… CWE-264
CWE-78
Permissions, Privileges, and Access Controls
OS Command  		CVE-2016-2876 2024-11-21 11:48 2016-12-1 Show GitHub Exploit DB Packet Storm
267313 3.1 LOW
Network 		ibm qradar_security_information_and_event_manager IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified vectors. CWE-284
Improper Access Control 		CVE-2016-2874 2024-11-21 11:48 2016-12-1 Show GitHub Exploit DB Packet Storm
267314 8.8 HIGH
Network 		ibm qradar_security_information_and_event_manager SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2016-2873 2024-11-21 11:48 2016-12-1 Show GitHub Exploit DB Packet Storm
267315 7.8 HIGH
Local 		ibm qradar_security_information_and_event_manager IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file. CWE-255
Credentials Management 		CVE-2016-2871 2024-11-21 11:48 2016-12-1 Show GitHub Exploit DB Packet Storm
267316 5.4 MEDIUM
Network 		ibm qradar_security_information_and_event_manager Multiple cross-site scripting (XSS) vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting 		CVE-2016-2869 2024-11-21 11:48 2016-12-1 Show GitHub Exploit DB Packet Storm
267317 5.4 MEDIUM
Network 		ibm rational_quality_manager
rational_engineering_lifecycle_manager
rational_team_concert
rational_collaborative_lifecycle_management
rational_rhapsody_design_manager
rational_doors_next_g… 		Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rationa… CWE-79
Cross-site Scripting 		CVE-2016-2864 2024-11-21 11:48 2016-11-25 Show GitHub Exploit DB Packet Storm
267318 7.5 HIGH
Network 		isc bind ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource recor… CWE-20
 Improper Input Validation  		CVE-2016-2848 2024-11-21 11:48 2016-10-21 Show GitHub Exploit DB Packet Storm
267319 8.6 HIGH
Network 		american_auto-matrix aspect-matrix_building_automation_front-end_solutions_application
aspect-nexus_building_automation_front-end_solutions_application 		American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application store passwords in cleartext, … NVD-CWE-Other
CVE-2016-2308 2024-11-21 11:48 2016-10-5 Show GitHub Exploit DB Packet Storm
267320 7.5 HIGH
Network 		american_auto-matrix aspect-matrix_building_automation_front-end_solutions_application
aspect-nexus_building_automation_front-end_solutions_application 		American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application allow remote attackers to read… CWE-200
Information Exposure 		CVE-2016-2307 2024-11-21 11:48 2016-10-5 Show GitHub Exploit DB Packet Storm