Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251751 3.5 注意 OTRS プロジェクト - OTRS におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-5055 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
251752 7.5 危険 Smarty - Smarty におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-5054 2012-03-27 18:42 2011-02-3 Show GitHub Exploit DB Packet Storm
251753 7.5 危険 Smarty - Smarty における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-5053 2012-03-27 18:42 2011-02-3 Show GitHub Exploit DB Packet Storm
251754 10 危険 Smarty - Smarty における詳細不明の脆弱性 CWE-noinfo
情報不足 		CVE-2009-5052 2012-03-27 18:42 2011-02-3 Show GitHub Exploit DB Packet Storm
251755 5 警告 Hastymail - Hastymail2 におけるクッキーを取り込まれる脆弱性 CWE-16
環境設定 		CVE-2009-5051 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
251756 5 警告 ViewVC - ViewVC における cvsdb row_limit 設定を迂回される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-5024 2012-03-27 18:42 2011-05-23 Show GitHub Exploit DB Packet Storm
251757 6.8 警告 catb - gif2png における任意のコマンドを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-5018 2012-03-27 18:42 2011-01-14 Show GitHub Exploit DB Packet Storm
251758 4 警告 IBM - IBM Lotus Notes Traveler の traveler.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2009-5036 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
251759 4.3 警告 IBM - IBM Lotus Notes Traveler の Nokia クライアントにおける他人への電子メールを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2009-5035 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
251760 4 警告 IBM - IBM Lotus Notes Traveler におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-5034 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265281 8.8 HIGH
Network 		moodle moodle Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-9186 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
265282 4.3 MEDIUM
Network 		openstack heat In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3, >=6.0.0 … CWE-200
Information Exposure 		CVE-2016-9185 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
265283 7.5 HIGH
Network 		exponentcms exponent_cms In /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0, untrusted input is used to construct a table name, and in the selectObject method in mysqli class, table name… CWE-200
CWE-89
Information Exposure
SQL Injection 		CVE-2016-9184 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
265284 7.5 HIGH
Network 		exponentcms exponent_cms In /framework/modules/ecommerce/controllers/orderController.php of Exponent CMS 2.4.0, untrusted input is passed into selectObjectsBySql. The method selectObjectsBySql of class mysqli_database uses t… CWE-200
Information Exposure 		CVE-2016-9183 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
265285 7.5 HIGH
Network 		sparkjava spark Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. CWE-22
Path Traversal 		CVE-2016-9177 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
265286 7.5 HIGH
Network 		exponentcms exponent_cms Exponent CMS 2.4 uses PHP reflection to call a method of a controller class, and then uses the method name to check user permission. But, the method name in PHP reflection is case insensitive, and Ex… CWE-284
Improper Access Control 		CVE-2016-9182 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
265287 9.8 CRITICAL
Network 		microfocus rumba Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inject arguments to these binaries to execu… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9176 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
265288 7.5 HIGH
Network 		artifex mujs Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by using the "crafted JavaScript" approach, related to a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9136 2024-11-21 12:00 2016-11-3 Show GitHub Exploit DB Packet Storm
265289 7.5 HIGH
Network 		exponentcms exponent_cms Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the version parameter. Impact is Information Disclosure. CWE-200
CWE-89
Information Exposure
SQL Injection 		CVE-2016-9135 2024-11-21 12:00 2016-11-3 Show GitHub Exploit DB Packet Storm
265290 7.5 HIGH
Network 		exponentcms exponent_cms Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter. Impact is Information Disclosure. CWE-200
CWE-89
Information Exposure
SQL Injection 		CVE-2016-9134 2024-11-21 12:00 2016-11-3 Show GitHub Exploit DB Packet Storm