Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225881 7.5 危険 webfileexplorer - Web File Explorer の body.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1323 2012-12-20 19:10 2009-04-17 Show GitHub Exploit DB Packet Storm
225882 4.3 警告 zazzle - Zazzle Store Builder の include/zstore.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1320 2012-12-20 19:10 2009-04-17 Show GitHub Exploit DB Packet Storm
225883 10 危険 webfileexplorer - Web File Explorer の body.asp における任意のファイルを作成される脆弱性 CWE-noinfo
情報不足 		CVE-2009-1314 2012-12-20 19:10 2009-04-16 Show GitHub Exploit DB Packet Storm
225884 5 警告 Rapid Leech - Rapidleech の upload.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1089 2012-12-20 19:10 2009-03-25 Show GitHub Exploit DB Packet Storm
225885 9.3 危険 pplive - PPLive の PPLive.exe における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1087 2012-12-20 19:10 2009-03-25 Show GitHub Exploit DB Packet Storm
225886 5 警告 Piwik - Piwik における API 鍵を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1085 2012-12-20 19:10 2009-03-25 Show GitHub Exploit DB Packet Storm
225887 6.4 警告 サン・マイクロシステムズ - Sun Java System IdM における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1084 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225888 6.9 警告 PulseAudio - PulseAudio の core-util.c における任意のファイルのパーミッションを変更される脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-1299 2012-12-20 19:10 2010-03-18 Show GitHub Exploit DB Packet Storm
225889 1.9 注意 Canonical - Ubuntu 上で稼動する ecryptfs-utils 73-0ubuntu におけるファイルシステムへのアクセス権を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-1296 2012-12-20 19:10 2009-06-8 Show GitHub Exploit DB Packet Storm
225890 10 危険 TIBCO Software - TIBCO SmartSockets、SmartSockets 製品ファミリーおよび EMS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1291 2012-12-20 19:10 2009-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198611 6.7 MEDIUM
Local 		linux linux_kernel An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU sequence count is mishandled during concurren… CWE-416
 Use After Free 		CVE-2020-36694 2024-11-21 14:30 2023-05-22 Show GitHub Exploit DB Packet Storm
198612 5.4 MEDIUM
Network 		sophos web_appliance A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a malicious form that mus… CWE-79
Cross-site Scripting 		CVE-2020-36692 2024-11-21 14:30 2023-04-4 Show GitHub Exploit DB Packet Storm
198613 8.8 HIGH
Network 		e-plugins wp_membership
fitness_trainer
hotel_directory
hospital_\&_doctor_directory
lawyer_directory
institutions_directory
real_estate_pro
final_user
directory_pro
photographer… 		The directory-pro WordPress plugin before 1.9.5, final-user-wp-frontend-user-profiles WordPress plugin before 1.2.2, producer-retailer WordPress plugin through TODO, photographer-directory WordPress … NVD-CWE-noinfo
CVE-2020-36666 2024-11-21 14:30 2023-03-28 Show GitHub Exploit DB Packet Storm
198614 5.5 MEDIUM
Local 		linux linux_kernel An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbounded recursion) via a nested Netlink policy with a back reference. CWE-674
 Uncontrolled Recursion 		CVE-2020-36691 2024-11-21 14:30 2023-03-25 Show GitHub Exploit DB Packet Storm
198615 6.1 MEDIUM
Network 		seotool_project seotool A vulnerability was found in Artesãos SEOTools up to 0.17.1 and classified as critical. This issue affects the function eachValue of the file TwitterCards.php. The manipulation of the argument value … CWE-601
Open Redirect 		CVE-2020-36665 2024-11-21 14:30 2023-03-5 Show GitHub Exploit DB Packet Storm
198616 6.1 MEDIUM
Network 		seotool_project seotool A vulnerability has been found in Artesãos SEOTools up to 0.17.1 and classified as problematic. This vulnerability affects the function setTitle of the file SEOMeta.php. The manipulation of the argum… - CVE-2020-36664 2024-11-21 14:30 2023-03-5 Show GitHub Exploit DB Packet Storm
198617 6.1 MEDIUM
Network 		seotool_project seotool A vulnerability, which was classified as problematic, was found in Artesãos SEOTools up to 0.17.1. This affects the function makeTag of the file OpenGraph.php. The manipulation of the argument value … CWE-601
Open Redirect 		CVE-2020-36663 2024-11-21 14:30 2023-03-4 Show GitHub Exploit DB Packet Storm
198618 7.1 HIGH
Local 		hitachi automation_director
infrastructure_analytics_advisor
ops_center_analyzer
ops_center_automator
ops_center_viewpoint 		Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe serve… CWE-276
Incorrect Default Permissions  		CVE-2020-36652 2024-11-21 14:30 2023-02-28 Show GitHub Exploit DB Packet Storm
198619 5.4 MEDIUM
Network 		brainstormforce spectra The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing contributors to conduct stored XSS attacks via the plugin's Gutenberg blocks. CWE-79
Cross-site Scripting 		CVE-2020-36656 2024-11-21 14:30 2023-02-21 Show GitHub Exploit DB Packet Storm
198620 7.5 HIGH
Network 		konghq multipart A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function is_header of the file src/multipart.lua. The manipulation leads t… - CVE-2020-36661 2024-11-21 14:30 2023-02-13 Show GitHub Exploit DB Packet Storm