Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242911 4.3 警告 ATutor - ACollab におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4942 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
242912 4.3 警告 ATutor - ATRC ACollab の sign_in.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4941 2012-06-26 16:19 2010-07-22 Show GitHub Exploit DB Packet Storm
242913 7.5 危険 esoftpro - Online Guestbook Pro の ogp_show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4935 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242914 4.3 警告 esoftpro - Online Photo Pro の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4934 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242915 6.8 警告 bestwebsharing - Groovy Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4931 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242916 4.3 警告 esoftpro - Online Contact Manager および EContact PRO におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4926 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242917 6.8 警告 creasito - Portale e-commerce Creasito における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4925 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
242918 4.3 警告 dan pascu - Dan Pascu python-cjson における特定のクロスサイトスクリプティング攻撃を誘発する脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4924 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
242919 6.8 警告 dootzky - oBlog の admin/index.php における総当りパスワード推測攻撃を実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-4909 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
242920 4.3 警告 dootzky - oBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4908 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268651 10.0 CRITICAL
Network 		mozilla
opensuse 		firefox
leap
opensuse 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly exe… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1931 2024-11-21 11:47 2016-02-1 Show GitHub Exploit DB Packet Storm
268652 9.8 CRITICAL
Network 		mozilla
oracle
opensuse 		firefox
linux
leap
opensuse 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1930 2024-11-21 11:47 2016-02-1 Show GitHub Exploit DB Packet Storm
268653 10.0 CRITICAL
Network 		hp operations_manager HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. CWE-94
Code Injection 		CVE-2016-1985 2024-11-21 11:47 2016-01-31 Show GitHub Exploit DB Packet Storm
268654 7.5 HIGH
Network 		freebsd freebsd FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel crash) via vectors related to creating a TCP connection with the TCP_MD5SIG and… CWE-19
 Data Processing Errors 		CVE-2016-1882 2024-11-21 11:47 2016-01-30 Show GitHub Exploit DB Packet Storm
268655 7.5 HIGH
Network 		freebsd freebsd The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denia… NVD-CWE-Other
CVE-2016-1879 2024-11-21 11:47 2016-01-30 Show GitHub Exploit DB Packet Storm
268656 5.9 MEDIUM
Network 		mariadb
oracle
opensuse
redhat
debian
canonical 		mariadb
linux
mysql
leap
enterprise_linux
debian_linux
ubuntu_linux 		The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 … CWE-254
 7PK - Security Features 		CVE-2016-2047 2024-11-21 11:47 2016-01-28 Show GitHub Exploit DB Packet Storm
268657 7.5 HIGH
Network 		privoxy privoxy The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header. CWE-20
 Improper Input Validation  		CVE-2016-1983 2024-11-21 11:47 2016-01-28 Show GitHub Exploit DB Packet Storm
268658 7.5 HIGH
Network 		privoxy privoxy The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content. CWE-20
 Improper Input Validation  		CVE-2016-1982 2024-11-21 11:47 2016-01-28 Show GitHub Exploit DB Packet Storm
268659 6.5 MEDIUM
Network 		uclouvain openjpeg The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1924 2024-11-21 11:47 2016-01-28 Show GitHub Exploit DB Packet Storm
268660 6.5 MEDIUM
Network 		uclouvain openjpeg Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafte… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1923 2024-11-21 11:47 2016-01-28 Show GitHub Exploit DB Packet Storm