Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243051	5	警告	Cherokee Project	-	Cherokee の header.c におけるウィンドウのタイトルを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2009-4489	2012-06-26 16:19	2010-01-13	Show	GitHub Exploit DB Packet Storm

243052	4.3	警告	bloofox	-	BloofoxCMS の search.5.html におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4522	2012-06-26 16:19	2009-12-31	Show	GitHub Exploit DB Packet Storm

243053	4.3	警告	Eclipse Foundation	-	BIRT の birt-viewer/run におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4521	2012-06-26 16:19	2009-12-17	Show	GitHub Exploit DB Packet Storm

243054	3.5	注意	Drupal astha bhatnagar	-	Drupal のモジュールの OpenSocial Shindig-Integrator モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4514	2012-06-26 16:19	2009-12-31	Show	GitHub Exploit DB Packet Storm

243055	9.3	危険	AzeoTech, Inc.	-	AzeoTech DAQFactory の Web サービスにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4480	2012-06-26 16:19	2009-12-30	Show	GitHub Exploit DB Packet Storm

243056	4.3	警告	Episerver	-	Ektron CMS400.NET におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4473	2012-06-26 16:19	2009-12-30	Show	GitHub Exploit DB Packet Storm

243057	7.5	危険	freeschool	-	FreeSchool における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-4471	2012-06-26 16:18	2009-12-30	Show	GitHub Exploit DB Packet Storm

243058	7.5	危険	dvbbs	-	DVBBS の boardrule.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4470	2012-06-26 16:18	2009-12-30	Show	GitHub Exploit DB Packet Storm

243059	4.3	警告	giombetti	-	phpPowerCards の pagenumber.inc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4469	2012-06-26 16:18	2009-12-30	Show	GitHub Exploit DB Packet Storm

243060	4.3	警告	deluxebb	-	DeluxeBB の misc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4468	2012-06-26 16:18	2009-12-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267621	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and applicatio…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4065	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267622	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge cal…	CWE-284 Improper Access Control	CVE-2016-4064	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267623	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in a PDF document.	NVD-CWE-Other	CVE-2016-4063	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267624	5.5	MEDIUM Local	foxitsoftware	foxit_reader phantompdf	Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a denial of service (application hang) via a crafted PDF.	CWE-19 Data Processing Errors	CVE-2016-4062	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267625	7.5	HIGH Network	foxitsoftware	foxit_reader phantompdf	Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream.	CWE-20 Improper Input Validation	CVE-2016-4061	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267626	7.5	HIGH Network	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service (application crash) via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-4060	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267627	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document.	NVD-CWE-Other	CVE-2016-4059	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267628	5.5	MEDIUM Local	opensuse giflib_project	opensuse giflib	Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3977	2024-11-21 11:51	2016-04-21	Show	GitHub Exploit DB Packet Storm

267629	7.2	HIGH Network	dotcms	dotcms	SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter.	CWE-89 SQL Injection	CVE-2016-4040	2024-11-21 11:51	2016-04-19	Show	GitHub Exploit DB Packet Storm

267630	8.8	HIGH Local	xen fedoraproject oracle	xen fedora vm_server	Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping.	CWE-264 NVD-CWE-Other Permissions, Privileges, and Access Controls	CVE-2016-3960	2024-11-21 11:51	2016-04-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed