Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
259611 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
259612 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
259613 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
259614 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
259615 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
259616 9.3 危険 マイクロソフト - Microsoft Internet Explorer において任意のコードが実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0249 2010-02-19 14:21 2010-01-15 Show GitHub Exploit DB Packet Storm
259617 7.5 危険 アップル
MySQL AB		 - MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-0227 2010-02-19 11:37 2008-01-10 Show GitHub Exploit DB Packet Storm
259618 7.5 危険 アップル
MySQL AB		 - MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0226 2010-02-19 11:32 2008-01-10 Show GitHub Exploit DB Packet Storm
259619 7.5 危険 Linux
レッドハット		 - Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
259620 7.8 危険 Linux
レッドハット		 - Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268681 8.8 HIGH
Network 		exponentcms exponent_cms Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote authenticated users to execute arbitrary S… CWE-89
SQL Injection 		CVE-2016-9242 2024-11-21 12:00 2016-11-7 Show GitHub Exploit DB Packet Storm
268682 6.8 MEDIUM
Physics 		citrix receiver_desktop Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection o… CWE-254
CWE-284
 7PK - Security Features
Improper Access Control 		CVE-2016-9111 2024-11-21 12:00 2016-11-7 Show GitHub Exploit DB Packet Storm
268683 6.0 MEDIUM
Local 		qemu
debian
opensuse
redhat 		qemu
debian_linux
leap
openstack
virtualization 		The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveragin… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2016-8910 2024-11-21 12:00 2016-11-5 Show GitHub Exploit DB Packet Storm
268684 6.0 MEDIUM
Local 		qemu
debian
opensuse
redhat 		qemu
debian_linux
leap
openstack
virtualization 		The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry wit… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2016-8909 2024-11-21 12:00 2016-11-5 Show GitHub Exploit DB Packet Storm
268685 8.1 HIGH
Network 		joomla joomla\! The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create … CWE-20
 Improper Input Validation  		CVE-2016-8870 2024-11-21 12:00 2016-11-5 Show GitHub Exploit DB Packet Storm
268686 9.8 CRITICAL
Network 		joomla joomla\! The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use o… CWE-20
 Improper Input Validation  		CVE-2016-8869 2024-11-21 12:00 2016-11-5 Show GitHub Exploit DB Packet Storm
268687 7.8 HIGH
Local 		python
debian 		pillow
debian_linux 		Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in … CWE-284
Improper Access Control 		CVE-2016-9190 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
268688 5.5 MEDIUM
Local 		python
debian 		pillow
debian_linux 		Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-9189 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
268689 6.1 MEDIUM
Network 		moodle moodle Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and … CWE-79
Cross-site Scripting 		CVE-2016-9188 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm
268690 8.8 HIGH
Network 		moodle moodle Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an ex… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-9187 2024-11-21 12:00 2016-11-4 Show GitHub Exploit DB Packet Storm