Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258211 7.2 危険 IBM - IBM DB2 の Install コンポーネントにおける脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4331 2010-02-4 11:19 2009-12-16 Show GitHub Exploit DB Packet Storm
258212 7.5 危険 IBM - IBM DB2 の Relational Data Services コンポーネントにおけるパスワードの引数を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-4333 2010-02-4 11:19 2009-12-16 Show GitHub Exploit DB Packet Storm
258213 7.2 危険 IBM - IBM DB2 の Engine Utilities コンポーネントの db2licm における脆弱性 CWE-noinfo
情報不足 		CVE-2009-4330 2010-02-4 11:18 2009-12-16 Show GitHub Exploit DB Packet Storm
258214 4 警告 IBM - IBM DB2 の Engine Utilities コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4329 2010-02-4 11:18 2009-12-16 Show GitHub Exploit DB Packet Storm
258215 7.2 危険 サイバートラスト株式会社
Linux		 - Linux kernel の kvm_dev_ioctl_get_supported_cpuid 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3638 2010-02-3 14:35 2009-10-29 Show GitHub Exploit DB Packet Storm
258216 5 警告 Linear LLC
S2 Security		 - Linear eMerge のマネージメントコンポーネントにおけるサービス運用妨害 (DoS) CWE-noinfo
情報不足 		CVE-2009-3734 2010-02-3 14:35 2010-01-5 Show GitHub Exploit DB Packet Storm
258217 7.5 危険 The PHP Group
LibGD project
サイバートラスト株式会社
レッドハット		 - PHP および GD Graphics Library の _gdGetColors 関数におけるバッファオーバーフローの脆弱性 CWE-Other
その他 		CVE-2009-3546 2010-02-3 14:34 2009-10-19 Show GitHub Exploit DB Packet Storm
258218 6.8 警告 GNU Project
XEmacs
サイバートラスト株式会社		 - Emacs および XEmacs における .flc ファイルの処理に関する任意のコードを実行される脆弱性 CWE-DesignError
CVE-2008-2142 2010-02-2 11:43 2008-05-12 Show GitHub Exploit DB Packet Storm
258219 3.5 注意 Drupal
サイバートラスト株式会社		 - Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4370 2010-02-2 11:43 2009-12-16 Show GitHub Exploit DB Packet Storm
258220 3.5 注意 Drupal
サイバートラスト株式会社		 - Drupal の Contact モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4369 2010-02-2 11:42 2009-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268291 7.5 HIGH
Network 		huawei usg2100_firmware
usg2200_firmware
usg5100_firmware
usg5500_firmware 		Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6669 2024-11-21 11:56 2016-09-23 Show GitHub Exploit DB Packet Storm
268292 9.8 CRITICAL
Network 		debian
artifex 		debian_linux
mupdf 		Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a large decode a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6525 2024-11-21 11:56 2016-09-23 Show GitHub Exploit DB Packet Storm
268293 8.8 HIGH
Network 		apache
debian 		jackrabbit
debian_linux 		Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10… CWE-352
 Origin Validation Error 		CVE-2016-6801 2024-11-21 11:56 2016-09-21 Show GitHub Exploit DB Packet Storm
268294 9.8 CRITICAL
Network 		dentsply_sirona cdr_dicom Dentsply Sirona (formerly Schick) CDR Dicom 5 and earlier has default passwords for the sa and cdr accounts, which allows remote attackers to obtain administrative access by leveraging knowledge of t… CWE-798
 Use of Hard-coded Credentials 		CVE-2016-6530 2024-11-21 11:56 2016-09-21 Show GitHub Exploit DB Packet Storm
268295 7.5 HIGH
Network 		apache shiro Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path. CWE-284
Improper Access Control 		CVE-2016-6802 2024-11-21 11:56 2016-09-21 Show GitHub Exploit DB Packet Storm
268296 9.8 CRITICAL
Network 		oracle
percona
mariadb
debian
redhat 		mysql
percona_server
mariadb
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
openstack
enterprise_linux_server
enterprise_linux_server_t… 		Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x befo… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6662 2024-11-21 11:56 2016-09-21 Show GitHub Exploit DB Packet Storm
268297 7.5 HIGH
Network 		aver eh6108h\+_firmware AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent a… CWE-200
Information Exposure 		CVE-2016-6537 2024-11-21 11:56 2016-09-19 Show GitHub Exploit DB Packet Storm
268298 9.8 CRITICAL
Network 		aver eh6108h\+_firmware The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access restrictions or modify passwords by leveraging knowledge of a … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6536 2024-11-21 11:56 2016-09-19 Show GitHub Exploit DB Packet Storm
268299 9.8 CRITICAL
Network 		aver eh6108h\+_firmware AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root access by leveraging knowledge of the credentials and establishin… CWE-798
 Use of Hard-coded Credentials 		CVE-2016-6535 2024-11-21 11:56 2016-09-19 Show GitHub Exploit DB Packet Storm
268300 6.5 MEDIUM
Network 		cisco fog_director Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368. CWE-20
 Improper Input Validation  		CVE-2016-6405 2024-11-21 11:56 2016-09-19 Show GitHub Exploit DB Packet Storm