Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245951 7.5 危険 Simple Machines
fustrate		 - SMF 用 Member Awards コンポーネントの awardsMembers 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2385 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
245952 7.5 危険 blogtrafficexchange
WordPress.org		 - WordPress 用の Related Sites プラグインの BTE_RW_Webajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2383 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
245953 5 警告 gizmo5 - Linux 上の Gizmo における任意のユーザの資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2381 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
245954 4.3 警告 4homepages - 4images の includes/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2380 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
245955 6.8 警告 BIGACE - BIGACE Web CMS の public/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2379 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
245956 4.3 警告 avax-software - AVAX-software Avax Vector ActiveX の Avax Vector ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2377 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
245957 7.5 危険 datachecknh - DataCheck Solutions ForumPal FE および ForumPal の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2366 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
245958 7.5 危険 datachecknh - DataCheck Solutions GalleryPal FE の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2365 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
245959 9.3 危険 dan cahill - NullLogic Groupware の pgsqlQuery 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2356 2012-06-26 16:10 2009-07-7 Show GitHub Exploit DB Packet Storm
245960 6.8 警告 eaccelerator - eAccelerator の encoder.php における 任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2353 2012-06-26 16:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253391 6.5 MEDIUM
Network 		libtiff libtiff In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9937 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
253392 6.5 MEDIUM
Network 		libtiff
debian
canonical 		libtiff
debian_linux
ubuntu_linux 		In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-9936 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
253393 8.8 HIGH
Network 		libtiff
canonical
debian 		libtiff
ubuntu_linux
debian_linux 		In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can… CWE-125
Out-of-bounds Read 		CVE-2017-9935 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
253394 5.5 MEDIUM
Local 		long_range_zip_project
debian 		long_range_zip
debian_linux 		In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9929 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
253395 5.5 MEDIUM
Local 		long_range_zip_project
debian 		long_range_zip
debian_linux 		In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9928 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
253396 7.8 HIGH
Local 		lame_project lame The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overfl… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9872 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
253397 7.8 HIGH
Local 		lame_project lame The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and ap… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9871 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
253398 5.5 MEDIUM
Local 		lame_project lame The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application c… CWE-125
Out-of-bounds Read 		CVE-2017-9870 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
253399 5.5 MEDIUM
Local 		lame_project lame The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application cr… CWE-125
Out-of-bounds Read 		CVE-2017-9869 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
253400 5.5 MEDIUM
Local 		eclipse
debian 		mosquitto
debian_linux 		In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information. CWE-200
Information Exposure 		CVE-2017-9868 2024-11-21 12:37 2017-06-25 Show GitHub Exploit DB Packet Storm