Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255111	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3460	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

255112	4.3	警告	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-2995	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

255113	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-2989	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

255114	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat の画像デコーダにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-2984	2010-02-9 13:54	2009-10-13	Show	GitHub Exploit DB Packet Storm

255115	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3797	2010-02-9 12:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

255116	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3796	2010-02-9 12:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

255117	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3794	2010-02-9 12:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

255118	10	危険	IBM	-	IBM Lotus Domino Web Access におけるリンク処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-0276	2010-02-8 13:19	2010-01-7	Show	GitHub Exploit DB Packet Storm

255119	10	危険	IBM	-	IBM Lotus Domino Web Access における脆弱性	CWE-noinfo 情報不足	CVE-2009-4594	2010-02-8 13:19	2009-06-5	Show	GitHub Exploit DB Packet Storm

255120	10	危険	IBM	-	IBM Lotus Domino Web Access の Ultra-light Mode における status-alerts URL の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-0275	2010-02-8 13:18	2010-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222961	6.1	MEDIUM Network	tuzicms	tuzicms	TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.	CWE-79 Cross-site Scripting	CVE-2019-16657	2024-11-21 13:30	2019-09-22	Show	GitHub Exploit DB Packet Storm

222962	9.8	CRITICAL Network	joyplus_project	joyplus	joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the database.	NVD-CWE-noinfo	CVE-2019-16656	2024-11-21 13:30	2019-09-22	Show	GitHub Exploit DB Packet Storm

222963	7.5	HIGH Network	joyplus_project	joyplus	joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available.	NVD-CWE-noinfo	CVE-2019-16655	2024-11-21 13:30	2019-09-22	Show	GitHub Exploit DB Packet Storm

222964	8.6	HIGH Network	embedthis	goahead	An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sen…	CWE-94 Code Injection	CVE-2019-16645	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

222965	10.0	CRITICAL Network	supermicro	x11dai-n_firmware x11dac_firmware x11dph-tq_firmware x11dph-i_firmware x11dph-t_firmware x11dps-re_firmware x11dsf-e_firmware x11dsn-ts_firmware x11dsn-tsq_firmware x11dsc\…	On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an att…	NVD-CWE-noinfo	CVE-2019-16650	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

222966	10.0	CRITICAL Network	supermicro	x11dai-n_firmware x11dac_firmware x11dph-tq_firmware x11dph-i_firmware x11dph-t_firmware x11dps-re_firmware x11dsf-e_firmware x11dsn-ts_firmware x11dsn-tsq_firmware x11dsc\…	On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred ove…	CWE-287 CWE-326 CWE-522 Improper Authentication Inadequate Encryption Strength Insufficiently Protected Credentials	CVE-2019-16649	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

222967	9.8	CRITICAL Network	tuzicms	tuzicms	App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring.	CWE-89 SQL Injection	CVE-2019-16644	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

222968	5.4	MEDIUM Network	zrlog	zrlog	An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the article_edit area.	CWE-79 Cross-site Scripting	CVE-2019-16643	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

222969	6.1	MEDIUM Network	draytek	vigor2925_firmware	On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product.	CWE-79 Cross-site Scripting	CVE-2019-16534	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

222970	6.1	MEDIUM Network	draytek	vigor2925_firmware	On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product.	CWE-79 Cross-site Scripting	CVE-2019-16533	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm