Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243071	7.5	危険	codemight	-	CodeMight VideoCMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4432	2012-06-26 16:18	2009-12-28	Show	GitHub Exploit DB Packet Storm

243072	7.5	危険	anything-digital Joomla!	-	Joomla! の Anything Digital Development JCal Pro コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-4431	2012-06-26 16:18	2009-12-28	Show	GitHub Exploit DB Packet Storm

243073	3.5	注意	Drupal alexander hass	-	Drupal の Sections モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4429	2012-06-26 16:18	2009-12-16	Show	GitHub Exploit DB Packet Storm

243074	7.5	危険	Deon George	-	phpLDAPadmin のcmd.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4427	2012-06-26 16:18	2009-12-28	Show	GitHub Exploit DB Packet Storm

243075	4.3	警告	aditus	-	Aditus Consulting JpGraph の GetURLArguments 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4422	2012-06-26 16:18	2009-12-24	Show	GitHub Exploit DB Packet Storm

243076	6.5	警告	Alexander Palmo	-	Simple PHP Blog の languages_cgi.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4421	2012-06-26 16:18	2009-12-24	Show	GitHub Exploit DB Packet Storm

243077	7.5	危険	edgewall	-	Trac における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-4405	2012-06-26 16:18	2009-12-23	Show	GitHub Exploit DB Packet Storm

243078	7.5	危険	daniel ptzinger TYPO3 Association	-	TYPO3 用の Document Directorys 拡張機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4393	2012-06-26 16:18	2009-12-22	Show	GitHub Exploit DB Packet Storm

243079	4.3	警告	daniel regelein TYPO3 Association	-	TYPO3 用の File list 拡張機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4391	2012-06-26 16:18	2009-12-22	Show	GitHub Exploit DB Packet Storm

243080	4.3	警告	frank krger TYPO3 Association	-	TYPO3 の nl_listman 拡張におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4388	2012-06-26 16:18	2009-12-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267621	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and applicatio…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4065	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267622	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge cal…	CWE-284 Improper Access Control	CVE-2016-4064	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267623	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in a PDF document.	NVD-CWE-Other	CVE-2016-4063	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267624	5.5	MEDIUM Local	foxitsoftware	foxit_reader phantompdf	Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a denial of service (application hang) via a crafted PDF.	CWE-19 Data Processing Errors	CVE-2016-4062	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267625	7.5	HIGH Network	foxitsoftware	foxit_reader phantompdf	Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream.	CWE-20 Improper Input Validation	CVE-2016-4061	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267626	7.5	HIGH Network	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service (application crash) via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-4060	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267627	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document.	NVD-CWE-Other	CVE-2016-4059	2024-11-21 11:51	2016-04-23	Show	GitHub Exploit DB Packet Storm

267628	5.5	MEDIUM Local	opensuse giflib_project	opensuse giflib	Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3977	2024-11-21 11:51	2016-04-21	Show	GitHub Exploit DB Packet Storm

267629	7.2	HIGH Network	dotcms	dotcms	SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter.	CWE-89 SQL Injection	CVE-2016-4040	2024-11-21 11:51	2016-04-19	Show	GitHub Exploit DB Packet Storm

267630	8.8	HIGH Local	xen fedoraproject oracle	xen fedora vm_server	Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping.	CWE-264 NVD-CWE-Other Permissions, Privileges, and Access Controls	CVE-2016-3960	2024-11-21 11:51	2016-04-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed