Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256701 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
256702 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
256703 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
256704 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
256705 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
256706 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
256707 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
256708 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
256709 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
256710 9.3 危険 マイクロソフト - Microsoft Office Word および Open XML File Format Converter における、任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3135 2010-01-6 14:44 2009-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267331 9.8 CRITICAL
Network 		puppet puppet
puppet_server
puppet_agent 		Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveragin… CWE-284
Improper Access Control 		CVE-2016-2785 2024-11-21 11:48 2016-06-11 Show GitHub Exploit DB Packet Storm
267332 9.8 CRITICAL
Network 		ge multilink_firmware General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, wh… CWE-798
 Use of Hard-coded Credentials 		CVE-2016-2310 2024-11-21 11:48 2016-06-9 Show GitHub Exploit DB Packet Storm
267333 8.8 HIGH
Network 		opensuse
debian
7-zip 		opensuse
debian_linux
7-zip 		The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2335 2024-11-21 11:48 2016-06-7 Show GitHub Exploit DB Packet Storm
267334 7.5 HIGH
Network 		moxa miineport_e2_1242_firmware
miineport_e1_4641_firmware
miineport_e2_4561_firmware
miineport_e3_firmware
miineport_e1_7080_firmware 		Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePor… CWE-200
Information Exposure 		CVE-2016-2295 2024-11-21 11:48 2016-05-31 Show GitHub Exploit DB Packet Storm
267335 7.5 HIGH
Network 		moxa miineport_e2_1242_firmware
miineport_e1_7080_firmware
miineport_e2_4561_firmware
miineport_e3_firmware
miineport_e1_4641_firmware 		Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePor… CWE-287
Improper Authentication 		CVE-2016-2286 2024-11-21 11:48 2016-05-31 Show GitHub Exploit DB Packet Storm
267336 8.8 HIGH
Network 		moxa miineport_e2_1242_firmware
miineport_e2_4561_firmware
miineport_e1_7080_firmware
miineport_e3_firmware
miineport_e1_4641_firmware 		Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242… CWE-352
 Origin Validation Error 		CVE-2016-2285 2024-11-21 11:48 2016-05-31 Show GitHub Exploit DB Packet Storm
267337 6.5 MEDIUM
Network 		blackbox alertwerks_servsensor_junior_firmware
alertwerks_servsensor_contact_firmware
alertwerks_servsensor_firmware 		Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and AlertWerks S… CWE-255
CWE-200
Credentials Management
Information Exposure 		CVE-2016-2311 2024-11-21 11:48 2016-05-30 Show GitHub Exploit DB Packet Storm
267338 7.2 HIGH
Network 		irz ruh2 iRZ RUH2 before 2b does not validate firmware patches, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors. CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2016-2309 2024-11-21 11:48 2016-05-30 Show GitHub Exploit DB Packet Storm
267339 4.7 MEDIUM
Network 		cmsmadesimple cms_made_simple CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS)… CWE-79
Cross-site Scripting 		CVE-2016-2784 2024-11-21 11:48 2016-05-26 Show GitHub Exploit DB Packet Storm
267340 7.8 HIGH
Local 		huawei mobile_broadband_hl_service The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2855 2024-11-21 11:48 2016-05-24 Show GitHub Exploit DB Packet Storm