Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253121 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
253122 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
253123 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
253124 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
253125 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
253126 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
253127 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
253128 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
253129 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
253130 9.3 危険 マイクロソフト - Microsoft Office Word および Open XML File Format Converter における、任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3135 2010-01-6 14:44 2009-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257161 9.8 CRITICAL
Network 		ibm system_storage_ts3100-ts3200_tape_library IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network, to change a user's password and gain remote access to the system. CWE-284
Improper Access Control 		CVE-2016-9005 2024-11-21 12:00 2017-02-9 Show GitHub Exploit DB Packet Storm
257162 9.8 CRITICAL
Network 		ibm dashdb_local IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database. CWE-798
 Use of Hard-coded Credentials 		CVE-2016-8954 2024-11-21 12:00 2017-02-9 Show GitHub Exploit DB Packet Storm
257163 7.5 HIGH
Network 		fedoraproject
artifex 		fedora
mujs 		Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (applicatio… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-9108 2024-11-21 12:00 2017-02-4 Show GitHub Exploit DB Packet Storm
257164 3.3 LOW
Local 		webmproject
fedoraproject 		libwebp
fedora 		Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors. CWE-190
 Integer Overflow or Wraparound 		CVE-2016-9085 2024-11-21 12:00 2017-02-4 Show GitHub Exploit DB Packet Storm
257165 5.5 MEDIUM
Local 		cairographics cairo Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file. CWE-190
 Integer Overflow or Wraparound 		CVE-2016-9082 2024-11-21 12:00 2017-02-4 Show GitHub Exploit DB Packet Storm
257166 7.5 HIGH
Network 		ibm urbancode_deploy IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent. CWE-284
Improper Access Control 		CVE-2016-9008 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
257167 6.1 MEDIUM
Network 		ibm infosphere_information_server_on_cloud
infosphere_datastage 		IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to nav… CWE-79
Cross-site Scripting 		CVE-2016-9000 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
257168 5.4 MEDIUM
Network 		ibm infosphere_information_server
infosphere_information_server_on_cloud
infosphere_datastage 		IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious C… CWE-79
Cross-site Scripting 		CVE-2016-8999 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
257169 5.3 MEDIUM
Network 		ibm infosphere_datastage IBM InfoSphere Information Server stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer hea… CWE-200
Information Exposure 		CVE-2016-8982 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
257170 5.3 MEDIUM
Network 		ibm license_metric_tool
bigfix_inventory 		IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system. CWE-200
Information Exposure 		CVE-2016-8977 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm