Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242911 4.3 警告 esoftpro - Online Contact Manager および EContact PRO におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4926 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242912 6.8 警告 creasito - Portale e-commerce Creasito における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4925 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242913 4.3 警告 dan pascu - Dan Pascu python-cjson における特定のクロスサイトスクリプティング攻撃を誘発する脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4924 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
242914 6.8 警告 dootzky - oBlog の admin/index.php における総当りパスワード推測攻撃を実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-4909 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
242915 4.3 警告 dootzky - oBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4908 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
242916 6.8 警告 dootzky - oBlog におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4907 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
242917 7.8 危険 シスコシステムズ - Cisco ASA 5580 シリーズの DTLS 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4923 2012-06-26 16:19 2009-04-6 Show GitHub Exploit DB Packet Storm
242918 6.8 警告 シスコシステムズ - Cisco ASA 5580 シリーズにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4922 2012-06-26 16:19 2009-04-6 Show GitHub Exploit DB Packet Storm
242919 7.8 危険 シスコシステムズ - Cisco ASA 5580 シリーズにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4921 2012-06-26 16:19 2009-04-6 Show GitHub Exploit DB Packet Storm
242920 7.8 危険 シスコシステムズ - Cisco ASA 5580 シリーズの CTM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4920 2012-06-26 16:19 2009-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267871 7.5 HIGH
Network 		jboss enterprise_application_platform The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption) by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability. CWE-399
 Resource Management Errors 		CVE-2016-2094 2024-11-21 11:47 2016-05-7 Show GitHub Exploit DB Packet Storm
267872 7.8 HIGH
Local 		linux
google 		linux_kernel
nexus_5x_firmware
nexus_6p_firmware 		The adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributio… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-2062 2024-11-21 11:47 2016-05-6 Show GitHub Exploit DB Packet Storm
267873 7.0 HIGH
Local 		linux
google 		linux_kernel
android 		The msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contri… CWE-269
 Improper Privilege Management 		CVE-2016-2059 2024-11-21 11:47 2016-05-6 Show GitHub Exploit DB Packet Storm
267874 6.5 MEDIUM
Network 		apache subversion The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service … NVD-CWE-Other
CVE-2016-2168 2024-11-21 11:47 2016-05-6 Show GitHub Exploit DB Packet Storm
267875 6.8 MEDIUM
Network 		apache subversion The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate … CWE-284
Improper Access Control 		CVE-2016-2167 2024-11-21 11:47 2016-05-6 Show GitHub Exploit DB Packet Storm
267876 8.2 HIGH
Network 		openssl openssl The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2176 2024-11-21 11:47 2016-05-5 Show GitHub Exploit DB Packet Storm
267877 7.5 HIGH
Network 		openssl
redhat 		openssl
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server_eus
enterprise… 		The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory … CWE-399
 Resource Management Errors 		CVE-2016-2109 2024-11-21 11:47 2016-05-5 Show GitHub Exploit DB Packet Storm
267878 7.5 HIGH
Network 		openssl
redhat 		openssl
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server_eus
enterprise… 		Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruptio… CWE-189
Numeric Errors 		CVE-2016-2106 2024-11-21 11:47 2016-05-5 Show GitHub Exploit DB Packet Storm
267879 9.8 CRITICAL
Network 		redhat
openssl
google 		enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
openssl
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise… 		The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2108 2024-11-21 11:47 2016-05-5 Show GitHub Exploit DB Packet Storm
267880 5.9 MEDIUM
Network 		redhat
opensuse
openssl
google
hp
nodejs
debian
canonical 		enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server_eus
enterprise_linux_hpc_… 		The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleart… CWE-310
CWE-200
Cryptographic Issues
Information Exposure 		CVE-2016-2107 2024-11-21 11:47 2016-05-5 Show GitHub Exploit DB Packet Storm