Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242881 7.5 危険 deluxebb - DeluxeBB における管理アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4465 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242882 4.3 警告 Activewebsoftwares - Active Business Directory の searchadvance.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4464 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242883 4.3 警告 FlatPress - FlatPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4461 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
242884 4.3 警告 FreePBX - FreePBX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4458 2012-06-26 16:18 2009-12-29 Show GitHub Exploit DB Packet Storm
242885 7.5 危険 greendesktiny - Green Desktiny の news_detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4456 2012-06-26 16:18 2009-12-29 Show GitHub Exploit DB Packet Storm
242886 7.5 危険 Activewebsoftwares - Active Auction House における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4437 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
242887 7.5 危険 Activewebsoftwares - Active Web Softwares eWebquiz における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4436 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
242888 6.8 警告 compmaster.prv.pl - F3Site 2009 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4435 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
242889 7.5 危険 codemight - CodeMight VideoCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4432 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
242890 7.5 危険 anything-digital
Joomla!		 - Joomla! の Anything Digital Development JCal Pro コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4431 2012-06-26 16:18 2009-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267361 2.7 LOW
Network 		ibm qradar_security_information_and_event_manager IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity ref… NVD-CWE-Other
CVE-2016-2868 2024-11-21 11:48 2016-07-2 Show GitHub Exploit DB Packet Storm
267362 7.0 HIGH
Local 		ibm streams
infosphere_streams 		IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors. CWE-254
 7PK - Security Features 		CVE-2016-2867 2024-11-21 11:48 2016-07-2 Show GitHub Exploit DB Packet Storm
267363 3.7 LOW
Network 		ibm websphere_extreme_scale IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 does not properly encrypt data, which makes it easier for remote attackers to obtain… CWE-200
Information Exposure 		CVE-2016-2861 2024-11-21 11:48 2016-07-2 Show GitHub Exploit DB Packet Storm
267364 7.8 HIGH
Local 		symantec mail_security_for_microsoft_exchange
norton_power_eraser
protection_engine
endpoint_protection
message_gateway
norton_360
norton_antivirus
norton_internet_security
norton_secu… 		The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SE… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2211 2024-11-21 11:48 2016-07-1 Show GitHub Exploit DB Packet Storm
267365 7.3 HIGH
Local 		symantec mail_security_for_microsoft_exchange
norton_power_eraser
protection_engine
endpoint_protection
message_gateway
norton_360
norton_antivirus
norton_internet_security
norton_secu… 		Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2210 2024-11-21 11:48 2016-07-1 Show GitHub Exploit DB Packet Storm
267366 7.3 HIGH
Local 		symantec mail_security_for_microsoft_exchange
norton_power_eraser
protection_engine
endpoint_protection
message_gateway
norton_360
norton_antivirus
norton_internet_security
norton_secu… 		Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway;… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2209 2024-11-21 11:48 2016-07-1 Show GitHub Exploit DB Packet Storm
267367 8.4 HIGH
Local 		symantec mail_security_for_microsoft_exchange
norton_power_eraser
protection_engine
endpoint_protection
message_gateway
norton_360
norton_antivirus
norton_internet_security
norton_secu… 		The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SE… CWE-20
 Improper Input Validation  		CVE-2016-2207 2024-11-21 11:48 2016-07-1 Show GitHub Exploit DB Packet Storm
267368 7.5 HIGH
Network 		fonality hud_web
fonality 		The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote … CWE-310
NVD-CWE-Other
Cryptographic Issues 		CVE-2016-2364 2024-11-21 11:48 2016-06-20 Show GitHub Exploit DB Packet Storm
267369 7.8 HIGH
Local 		fonality fonality Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2363 2024-11-21 11:48 2016-06-20 Show GitHub Exploit DB Packet Storm
267370 9.8 CRITICAL
Network 		fonality fonality Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 has a hardcoded password for the FTP account, which allows remote attackers to obtain access via a (1) FTP or (2) SSH connection. NVD-CWE-Other
CVE-2016-2362 2024-11-21 11:48 2016-06-20 Show GitHub Exploit DB Packet Storm