Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225831	7.5	危険	phpcityportal	-	PHPCityPortal の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4870	2012-12-20 19:28	2010-05-11	Show	GitHub Exploit DB Packet Storm

225832	4.3	警告	tony million	-	Tuniac におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4867	2012-12-20 19:28	2010-05-11	Show	GitHub Exploit DB Packet Storm

225833	4.3	警告	PunBB	-	PunBB の profile.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4894	2012-12-20 19:28	2009-05-20	Show	GitHub Exploit DB Packet Storm

225834	9.3	危険	ultraplayer	-	UltraPlayer Media Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4863	2012-12-20 19:28	2010-05-11	Show	GitHub Exploit DB Packet Storm

225835	4.3	警告	supportpro	-	SupportPRO SupportDesk の shownews.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4861	2012-12-20 19:28	2010-05-11	Show	GitHub Exploit DB Packet Storm

225836	4.3	警告	turnkeyforms	-	Yahoo Answers Clone の questiondetail.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4858	2012-12-20 19:28	2010-05-11	Show	GitHub Exploit DB Packet Storm

225837	7.5	危険	scripts.oldguy	-	TalkBack の addons/import.php における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2009-4854	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

225838	6.8	警告	toutvirtual	-	ToutVirtual VirtualIQ Pro におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4849	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

225839	4.3	警告	toutvirtual	-	ToutVirtual VirtualIQ Pro におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4848	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

225840	5	警告	toutvirtual	-	ToutVirtual VirtualIQ Pro の設定ページにおける重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2009-4845	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211931	7.8	HIGH Local	antixlinux mxlinux	antix_linux mx_linux	antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration.	NVD-CWE-noinfo	CVE-2020-10587	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

211932	7.5	HIGH Network	q-cms	qcms	An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.	NVD-CWE-noinfo	CVE-2020-10578	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

211933	4.8	MEDIUM Network	meetecho	janus	An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions.	CWE-362 Race Condition	CVE-2020-10577	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

211934	5.9	MEDIUM Network	meetecho	janus	An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition that could cause a server crash.	CWE-362 Race Condition	CVE-2020-10576	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

211935	4.2	MEDIUM Network	meetecho	janus	An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early o…	CWE-362 Race Condition	CVE-2020-10575	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

211936	9.8	CRITICAL Network	meetecho	janus	An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation.	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2020-10574	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

211937	7.5	HIGH Network	meetecho	janus	An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private rooms in AudioBridge.	CWE-667 Improper Locking	CVE-2020-10573	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

211938	9.8	CRITICAL Network	psd-tools_project	psd-tools	An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-10571	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

211939	8.8	HIGH Network	onthegosystems	sitepress-multilingual-cms	The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of …	CWE-352 Origin Validation Error	CVE-2020-10568	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

211940	9.8	CRITICAL Network	tecrail	responsive_filemanager	An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. Th…	CWE-20 Improper Input Validation	CVE-2020-10567	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed