Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242981	4.3	警告	AfterLogic	-	AfterLogic WebMail Pro の history-storage.aspx におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4743	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

242982	7.5	危険	Docebo	-	Docebo における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4742	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

242983	7.5	危険	Allomani	-	Allomani Audio & Video Library の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4735	2012-06-26 16:19	2010-03-18	Show	GitHub Exploit DB Packet Storm

242984	7.5	危険	Allomani	-	Allomani Movies Library の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4734	2012-06-26 16:19	2010-03-18	Show	GitHub Exploit DB Packet Storm

242985	7.5	危険	boldfx	-	Model Agency Manager PRO の photos.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4731	2012-06-26 16:19	2010-03-18	Show	GitHub Exploit DB Packet Storm

242986	5.1	警告	Arab Portal	-	Arab Portal の modules/aljazeera/admin/setup.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4725	2012-06-26 16:19	2010-03-18	Show	GitHub Exploit DB Packet Storm

242987	7.5	危険	andrews-web	-	A-W BannerAd の Admin/index.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4721	2012-06-26 16:19	2010-03-18	Show	GitHub Exploit DB Packet Storm

242988	7.5	危険	gnudip	-	GnuDIP の cgi-bin/gnudip.cgi における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4720	2012-06-26 16:19	2010-03-18	Show	GitHub Exploit DB Packet Storm

242989	7.5	危険	bob jewell	-	Discloser の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4719	2012-06-26 16:19	2010-03-18	Show	GitHub Exploit DB Packet Storm

242990	7.5	危険	gonafish	-	Gonafish WebStatCaffe における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4718	2012-06-26 16:19	2010-03-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268211	7.9	HIGH Local	hp	700_series_firmware 800_series_firmware z240_firmware z238_firmware zbook_firmware 1000_series_firmware elitebook_folio_1012_x2_g2	Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service (BIOS recovery failure) by leveraging administrative access.	CWE-284 Improper Access Control	CVE-2016-2243	2024-11-21 11:48	2016-03-5	Show	GitHub Exploit DB Packet Storm

268212	9.8	CRITICAL Network	openssl	openssl	The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cau…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2842	2024-11-21 11:48	2016-03-4	Show	GitHub Exploit DB Packet Storm

268213	6.1	MEDIUM Network	rockwellautomation	compactlogix_1769-l16er-bb1b_firmware compactlogix_1769-l18er-bb1b_firmware compactlogix_1769-l18erm-bb1b_firmware compactlogix_1769-l24er-qb1b_firmware compactlogix_1769-l24er-qbfc1b_fir…	Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2016-2279	2024-11-21 11:48	2016-03-2	Show	GitHub Exploit DB Packet Storm

268214	7.2	HIGH Network	schneider-electric	struxureware_building_operations_automation_server_as_firmware struxureware_building_operations_automation_server_as-p_firmware	Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by defeat…	CWE-284 Improper Access Control	CVE-2016-2278	2024-11-21 11:48	2016-03-2	Show	GitHub Exploit DB Packet Storm

268215	6.8	MEDIUM Network	phpmyadmin	phpmyadmin	The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to…	CWE-20 Improper Input Validation	CVE-2016-2562	2024-11-21 11:48	2016-03-1	Show	GitHub Exploit DB Packet Storm

268216	5.4	MEDIUM Network	phpmyadmin	phpmyadmin	Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated users to inject arbitrary web script or HTML via (1) normal…	CWE-79 Cross-site Scripting	CVE-2016-2561	2024-11-21 11:48	2016-03-1	Show	GitHub Exploit DB Packet Storm

268217	6.1	MEDIUM Network	phpmyadmin	phpmyadmin	Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML…	CWE-79 Cross-site Scripting	CVE-2016-2560	2024-11-21 11:48	2016-03-1	Show	GitHub Exploit DB Packet Storm

268218	5.4	MEDIUM Network	phpmyadmin	phpmyadmin	Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to i…	CWE-79 Cross-site Scripting	CVE-2016-2559	2024-11-21 11:48	2016-03-1	Show	GitHub Exploit DB Packet Storm

268219	5.9	MEDIUM Network	wireshark	wireshark	The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2532	2024-11-21 11:48	2016-02-28	Show	GitHub Exploit DB Packet Storm

268220	5.9	MEDIUM Network	wireshark	wireshark	Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (out-of-bounds rea…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2531	2024-11-21 11:48	2016-02-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed