Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243011 4.3 警告 geccbblite - geccBBlite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4649 2012-06-26 16:19 2010-02-22 Show GitHub Exploit DB Packet Storm
243012 7.2 危険 Accellion - Accellion Secure File Transfer Appliance における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4648 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
243013 4.3 警告 Accellion - Accellion Secure File Transfer Appliance におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4647 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
243014 9 危険 Accellion - Accellion Secure File Transfer Appliance の管理用の Web インターフェースにおける任意のシェルコマンドを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2009-4646 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
243015 7.8 危険 Accellion - Accellion Secure File Transfer Appliance の web_client_user_guide.html におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4645 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
243016 9 危険 Accellion - Accellion Secure File Transfer Appliance における任意コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2009-4644 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
243017 7.2 危険 GNOME Project - gnome-screensaver における画面がロックされている無人のワークステーションにアクセスされる脆弱性 CWE-Other
その他
CVE-2009-4642 2012-06-26 16:19 2010-02-11 Show GitHub Exploit DB Packet Storm
243018 7.2 危険 GNOME Project - gnome-screensaver における画面がロックされている無人のワークステーションにアクセスされる脆弱性 CWE-Other
その他
CVE-2009-4641 2012-06-26 16:19 2010-02-11 Show GitHub Exploit DB Packet Storm
243019 4.3 警告 FFmpeg - FFmpeg の vorbis_dec.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2009-4640 2012-06-26 16:19 2010-02-9 Show GitHub Exploit DB Packet Storm
243020 4.3 警告 FFmpeg - FFmpeg の AVI デマルチプレクサの av_rescale_rnd 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2009-4639 2012-06-26 16:19 2010-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267731 5.4 MEDIUM
Network
ibm jazz_reporting_service Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows rem… CWE-79
Cross-site Scripting
CVE-2016-2888 2024-11-21 11:49 2016-07-8 Show GitHub Exploit DB Packet Storm
267732 7.5 HIGH
Network
ibm websphere_application_server IBM WebSphere Application Server (WAS) 8.5 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified JAX-RS API cookie, whi… CWE-200
Information Exposure
CVE-2016-2923 2024-11-21 11:49 2016-07-7 Show GitHub Exploit DB Packet Storm
267733 7.5 HIGH
Network
hp
apache
debian
canonical
icewall_sso_agent_option
icewall_identity_manager
tomcat
debian_linux
commons_fileupload
ubuntu_linux
The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, all… CWE-20
 Improper Input Validation 
CVE-2016-3092 2024-11-21 11:49 2016-07-5 Show GitHub Exploit DB Packet Storm
267734 2.5 LOW
Local
ibm tivoli_storage_manager IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary ac… CWE-200
Information Exposure
CVE-2016-2894 2024-11-21 11:49 2016-07-4 Show GitHub Exploit DB Packet Storm
267735 6.5 MEDIUM
Network
ibm security_qradar_incident_forensics IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2968 2024-11-21 11:49 2016-07-2 Show GitHub Exploit DB Packet Storm
267736 5.3 MEDIUM
Network
ibm integration_bus
websphere_message_broker
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version informat… CWE-200
Information Exposure
CVE-2016-2961 2024-11-21 11:49 2016-07-2 Show GitHub Exploit DB Packet Storm
267737 5.4 MEDIUM
Network
ibm tririga_application_platform Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web s… CWE-79
Cross-site Scripting
CVE-2016-2883 2024-11-21 11:49 2016-07-2 Show GitHub Exploit DB Packet Storm
267738 4.3 MEDIUM
Network
ibm tririga_application_platform IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses. CWE-200
Information Exposure
CVE-2016-2882 2024-11-21 11:49 2016-07-2 Show GitHub Exploit DB Packet Storm
267739 6.5 MEDIUM
Network
bzip
python
bzip2
python
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the… NVD-CWE-Other
CVE-2016-3189 2024-11-21 11:49 2016-07-1 Show GitHub Exploit DB Packet Storm
267740 8.8 HIGH
Network
ibm websphere_portal
web_content_manager
Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers to hijack the authent… CWE-352
 Origin Validation Error
CVE-2016-2901 2024-11-21 11:49 2016-06-26 Show GitHub Exploit DB Packet Storm