Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225881 10 危険 rhinosoft - Rhino Software Serv-U Web Client の HTTP サーバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4873 2012-12-20 19:28 2010-05-26 Show GitHub Exploit DB Packet Storm
225882 7.5 危険 phpcityportal - PHPCityPortal の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4870 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
225883 4.3 警告 tony million - Tuniac におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4867 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
225884 4.3 警告 PunBB - PunBB の profile.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4894 2012-12-20 19:28 2009-05-20 Show GitHub Exploit DB Packet Storm
225885 9.3 危険 ultraplayer - UltraPlayer Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4863 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
225886 4.3 警告 supportpro - SupportPRO SupportDesk の shownews.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4861 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
225887 4.3 警告 turnkeyforms - Yahoo Answers Clone の questiondetail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4858 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
225888 7.5 危険 scripts.oldguy - TalkBack の addons/import.php における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4854 2012-12-20 19:28 2010-05-7 Show GitHub Exploit DB Packet Storm
225889 6.8 警告 toutvirtual - ToutVirtual VirtualIQ Pro におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4849 2012-12-20 19:28 2010-05-7 Show GitHub Exploit DB Packet Storm
225890 4.3 警告 toutvirtual - ToutVirtual VirtualIQ Pro におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4848 2012-12-20 19:28 2010-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197891 7.5 HIGH
Network 		mitsubishielectric melsec_iq-rj71eip91_firmware
melsec_iq-rj71pn92_firmware
melsec_iq-rd81dl96_firmware
melsec_iq-rd81mes96n_firmware
melsec_iq-rd81opc96_firmware 		NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or b… CWE-476
 NULL Pointer Dereference 		CVE-2020-5655 2024-11-21 14:34 2020-11-3 Show GitHub Exploit DB Packet Storm
197892 7.5 HIGH
Network 		mitsubishielectric melsec_iq-rj71eip91_firmware
melsec_iq-rj71pn92_firmware
melsec_iq-rd81dl96_firmware
melsec_iq-rd81mes96n_firmware
melsec_iq-rd81opc96_firmware 		Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ… CWE-384
 Session Fixation 		CVE-2020-5654 2024-11-21 14:34 2020-11-3 Show GitHub Exploit DB Packet Storm
197893 9.8 CRITICAL
Network 		mitsubishielectric melsec_iq-rj71eip91_firmware
melsec_iq-rj71pn92_firmware
melsec_iq-rd81dl96_firmware
melsec_iq-rd81mes96n_firmware
melsec_iq-rd81opc96_firmware 		Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ7… CWE-120
Classic Buffer Overflow 		CVE-2020-5653 2024-11-21 14:34 2020-11-3 Show GitHub Exploit DB Packet Storm
197894 7.5 HIGH
Network 		mitsubishielectric melsec_q-q04udpvcpu_firmware
melsec_q-q06udpvcpu_firmware
melsec_q-q13udpvcpu_firmware
melsec_q-q26udpvcpu_firmware
melsec_q-q03udvcpu_firmware
melsec_q-q04udvcpu_firmware
melsec_q-… 		Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware ver… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-5652 2024-11-21 14:34 2020-11-3 Show GitHub Exploit DB Packet Storm
197895 7.8 HIGH
Local 		nvidia cuda_toolkit NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write operation may lead to code execution, denial of service, or i… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2020-5991 2024-11-21 14:34 2020-10-31 Show GitHub Exploit DB Packet Storm
197896 7.9 HIGH
Network 		vmware single_sign-on_for_tanzu Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1 are vulnerable to user impersonation attack.If two users are logged in to the … CWE-287
Improper Authentication 		CVE-2020-5425 2024-11-21 14:34 2020-11-1 Show GitHub Exploit DB Packet Storm
197897 7.5 HIGH
Network 		f5 big-ip_local_traffic_manager On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel (TMM) process may consume excessive resources when processing SSL traffic and … CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-5936 2024-11-21 14:34 2020-10-30 Show GitHub Exploit DB Packet Storm
197898 6.5 MEDIUM
Adjacent 		f5 big-ip_access_policy_manager On BIG-IP APM 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when multiple HTTP requests from the same client to configured SAML Single Logout (SLO) URL are passing through a TCP Keep-Alive c… NVD-CWE-noinfo
CVE-2020-5934 2024-11-21 14:34 2020-10-30 Show GitHub Exploit DB Packet Storm
197899 4.8 MEDIUM
Network 		f5 big-ip_application_security_manager On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting (XSS) vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privile… CWE-79
Cross-site Scripting 		CVE-2020-5932 2024-11-21 14:34 2020-10-30 Show GitHub Exploit DB Packet Storm
197900 5.9 MEDIUM
Network 		f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_access_policy_manager
big-ip_analytics
big-ip_application_security_manager<… 		On BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when handling MQTT traffic through a BIG-IP virtual… NVD-CWE-noinfo
CVE-2020-5935 2024-11-21 14:34 2020-10-30 Show GitHub Exploit DB Packet Storm