Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
243021 10 危険 FFmpeg - FFmpeg の vorbis_dec.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-4633 2012-06-26 16:19 2010-02-9 Show GitHub Exploit DB Packet Storm
243022 5.8 警告 FFmpeg - FFmpeg の oggparsevorbis.c における重要なメモリコンテンツを取得される脆弱性 CWE-189
数値処理の問題 		CVE-2009-4632 2012-06-26 16:19 2010-02-9 Show GitHub Exploit DB Packet Storm
243023 9.3 危険 FFmpeg - FFmpeg の VP3 デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-4631 2012-06-26 16:19 2010-02-9 Show GitHub Exploit DB Packet Storm
243024 5 警告 dan brown - Moa Gallery の sources/_template_parser.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4627 2012-06-26 16:19 2010-01-18 Show GitHub Exploit DB Packet Storm
243025 7.5 危険 dan brown - Moa Gallery における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4614 2012-06-26 16:19 2010-01-18 Show GitHub Exploit DB Packet Storm
243026 7.5 危険 fernando soares
Joomla!		 - Joomla! 用 Fernando Soares Mamboleto コンポーネントの mamboleto.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4604 2012-06-26 16:19 2010-01-12 Show GitHub Exploit DB Packet Storm
243027 7.5 危険 corephp
Joomla!		 - Joomla! の jphoto コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4598 2012-06-26 16:19 2010-01-12 Show GitHub Exploit DB Packet Storm
243028 9.3 危険 awingsoft - AwingSoft Awakening Web3D Player などの WindsPlayerIE.View.1 ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4588 2012-06-26 16:19 2010-01-7 Show GitHub Exploit DB Packet Storm
243029 5 警告 Cherokee Project - Cherokee Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4587 2012-06-26 16:19 2010-01-7 Show GitHub Exploit DB Packet Storm
243030 5 警告 ASP indir - UranyumSoft Listing Service におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4585 2012-06-26 16:19 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267641 5.4 MEDIUM
Network 		fortinet fortimanager_firmware
fortianalyzer_firmware 		Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 and FortiAnalyzer 5.x before 5.0.13, 5… CWE-79
Cross-site Scripting 		CVE-2016-3193 2024-11-21 11:49 2016-08-20 Show GitHub Exploit DB Packet Storm
267642 6.1 MEDIUM
Network 		apache openmeetings Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter. CWE-79
Cross-site Scripting 		CVE-2016-3089 2024-11-21 11:49 2016-08-20 Show GitHub Exploit DB Packet Storm
267643 5.3 MEDIUM
Network 		microsoft internet_explorer
edge 		Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Internet Explorer Information Disclosure Vulnerability." CWE-200
Information Exposure 		CVE-2016-3329 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
267644 5.3 MEDIUM
Network 		microsoft internet_explorer
edge 		Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a differ… CWE-200
Information Exposure 		CVE-2016-3327 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
267645 5.3 MEDIUM
Network 		microsoft internet_explorer
edge 		Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a differ… CWE-200
Information Exposure 		CVE-2016-3326 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
267646 7.5 HIGH
Network 		microsoft edge
internet_explorer 		Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability tha… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3322 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
267647 2.5 LOW
Local 		microsoft internet_explorer Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a… CWE-200
Information Exposure 		CVE-2016-3321 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
267648 4.9 MEDIUM
Network 		microsoft
fedoraproject 		windows_server_2012
windows_10
windows_8.1
windows_rt_8.1
fedora 		Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or… CWE-254
 7PK - Security Features 		CVE-2016-3320 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
267649 7.0 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
edge 		The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "… CWE-284
Improper Access Control 		CVE-2016-3319 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
267650 7.8 HIGH
Local 		microsoft office Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted file, aka "Graphics Component Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3318 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm