Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242991 4.3 警告 gonafish - Gonafish WebStatCaffe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4717 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242992 4.3 警告 edgephp - EDGEPHP EZWebSearch の results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4716 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242993 4.3 警告 alexandre amaral - XOOPS Celepar の quiz モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4714 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242994 4.3 警告 alexandre amaral - XOOPS Celepar の Qas モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4713 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242995 7.5 危険 dirk maiwert
TYPO3 Association
- TYPO3 の datamints_newsticker 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4709 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242996 7.5 危険 alexandre amaral - XOOPS Celepar の Qas モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4698 2012-06-26 16:19 2010-03-15 Show GitHub Exploit DB Packet Storm
242997 7.5 危険 grafxsoftware - GraFX MiniCWB における PHP リモートファイルインクルーションの脆弱性 CWE-94
コード・インジェクション
CVE-2009-4693 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
242998 4.3 警告 edgephp - EZodiak の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4684 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
242999 4.3 警告 frank-karau - phpFK PHP Forum ohne の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4677 2012-06-26 16:19 2010-03-8 Show GitHub Exploit DB Packet Storm
243000 9.3 危険 JetAudio - jetAudio の JetCast.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4676 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268441 7.5 HIGH
Network
apple mac_os_x
iphone_os
tvos
The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive inf… CWE-200
Information Exposure
CVE-2016-1801 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268442 8.8 HIGH
Network
apple mac_os_x Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2016-1800 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268443 7.8 HIGH
Local
apple mac_os_x Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1799 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268444 3.3 LOW
Local
apple mac_os_x Audio in Apple OS X before 10.11.5 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app. NVD-CWE-Other
CVE-2016-1798 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268445 7.8 HIGH
Local
apple mac_os_x Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted a… CWE-284
Improper Access Control
CVE-2016-1797 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268446 3.3 LOW
Local
apple mac_os_x Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds memory access) via a crafted a… CWE-200
Information Exposure
CVE-2016-1796 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268447 7.8 HIGH
Local
apple mac_os_x AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1795 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268448 7.8 HIGH
Local
apple mac_os_x The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of serv… NVD-CWE-Other
CVE-2016-1794 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268449 7.8 HIGH
Local
apple mac_os_x AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted … NVD-CWE-Other
CVE-2016-1793 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268450 7.8 HIGH
Local
apple mac_os_x The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1792 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm