Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256281 6 警告 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-3759 2010-09-14 15:54 2009-10-22 Show GitHub Exploit DB Packet Storm
256282 7.5 危険 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3758 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
256283 4.3 警告 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3757 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
256284 7.2 危険 シトリックス・システムズ - Xen の xend におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5716 2010-09-14 15:53 2008-12-24 Show GitHub Exploit DB Packet Storm
256285 6 警告 VMware - VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2667 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
256286 4.4 警告 VMware - VMware Studio における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2427 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
256287 6.8 警告 VMware - VMware SpringSource tc Server Runtime における JMX インターフェイスへのアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-1454 2010-09-13 16:05 2010-05-13 Show GitHub Exploit DB Packet Storm
256288 4.3 警告 VMware - VMware View におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1143 2010-09-13 16:04 2010-05-5 Show GitHub Exploit DB Packet Storm
256289 4.9 警告 VMware - 複数の VMware 製品の hcmon.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3761 2010-09-13 16:04 2008-08-21 Show GitHub Exploit DB Packet Storm
256290 2.1 注意 VMware - VMware VirtualCenter におけるパスワードを盗まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-4278 2010-09-13 16:04 2008-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264521 6.5 MEDIUM
Network 		cisco nexus_1000v_intercloud_firmware A vulnerability in the Cisco Intercloud Fabric (ICF) Director could allow an unauthenticated, remote attacker to connect to internal services with an internal account. Affected Products: Cisco Nexus … CWE-255
Credentials Management 		CVE-2016-9204 2024-11-21 12:00 2016-12-14 Show GitHub Exploit DB Packet Storm
264522 7.5 HIGH
Network 		cisco asr_5000_series_software A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. Mor… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9203 2024-11-21 12:00 2016-12-14 Show GitHub Exploit DB Packet Storm
264523 6.1 MEDIUM
Network 		cisco email_security_appliance A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting (XS… CWE-79
Cross-site Scripting 		CVE-2016-9202 2024-11-21 12:00 2016-12-14 Show GitHub Exploit DB Packet Storm
264524 7.5 HIGH
Network 		cisco ios A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based… CWE-200
CWE-20
Information Exposure
 Improper Input Validation  		CVE-2016-9201 2024-11-21 12:00 2016-12-14 Show GitHub Exploit DB Packet Storm
264525 6.1 MEDIUM
Network 		cisco prime_collaboration_assurance A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the… CWE-79
Cross-site Scripting 		CVE-2016-9200 2024-11-21 12:00 2016-12-14 Show GitHub Exploit DB Packet Storm
264526 6.5 MEDIUM
Network 		cisco iox A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vulne… CWE-22
Path Traversal 		CVE-2016-9199 2024-11-21 12:00 2016-12-14 Show GitHub Exploit DB Packet Storm
264527 7.5 HIGH
Network 		cisco identity_services_engine A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a denial of service (DoS) attack. More… CWE-399
 Resource Management Errors 		CVE-2016-9198 2024-11-21 12:00 2016-12-14 Show GitHub Exploit DB Packet Storm
264528 7.5 HIGH
Network 		cisco firesight_system_software
firepower_management_center 		A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypas… CWE-20
 Improper Input Validation  		CVE-2016-9193 2024-11-21 12:00 2016-12-14 Show GitHub Exploit DB Packet Storm
264529 7.8 HIGH
Local 		cisco anyconnect_secure_mobility_client A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to t… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9192 2024-11-21 12:00 2016-12-14 Show GitHub Exploit DB Packet Storm
264530 6.0 MEDIUM
Local 		qemu
opensuse
debian 		qemu
leap
debian_linux 		Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to fre… CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2016-9106 2024-11-21 12:00 2016-12-10 Show GitHub Exploit DB Packet Storm