Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225911	4.3	警告	phpscriptsnow	-	PHP Scripts Now Astrology の celebrities.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4685	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

225912	7.5	危険	Scriptsez.net	-	Good/Bad Vote の vote.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4683	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

225913	4.3	警告	Scriptsez.net	-	Good/Bad Vote の vote.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4682	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

225914	4.3	警告	php directory source	-	phpDirectorySource の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4681	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

225915	7.5	危険	php directory source	-	phpDirectorySource の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4680	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

225916	4.3	警告	Winn GuestBook	-	Winn Guestbook におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4678	2012-12-20 19:28	2010-03-8	Show	GitHub Exploit DB Packet Storm

225917	6.5	警告	phpmember	-	WebMember の form.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4667	2012-12-20 19:28	2010-03-5	Show	GitHub Exploit DB Packet Storm

225918	7.5	危険	qualityunit	-	Webradev Download Protect における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-4666	2012-12-20 19:28	2010-03-5	Show	GitHub Exploit DB Packet Storm

225919	9.3	危険	quiksoft	-	Quiksoft EasyMail Objects ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4663	2012-12-20 19:28	2010-03-3	Show	GitHub Exploit DB Packet Storm

225920	7.5	危険	templateplaza	-	Joomla! 用の tpdugg コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4628	2012-12-20 19:28	2010-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212141	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_8.1 windows_server_2019	<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information t…	NVD-CWE-noinfo	CVE-2020-0941	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212142	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to f…	NVD-CWE-noinfo	CVE-2020-0928	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212143	8.8	HIGH Network	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary c…	NVD-CWE-noinfo	CVE-2020-0922	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212144	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai…	NVD-CWE-noinfo	CVE-2020-0914	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212145	7.0	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.</p> <p>To exploit this vulnerability, an attacker would first have to ga…	NVD-CWE-noinfo	CVE-2020-0912	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212146	7.8	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co…	NVD-CWE-noinfo	CVE-2020-0911	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212147	7.5	HIGH Network	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a vict…	NVD-CWE-noinfo	CVE-2020-0908	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212148	6.5	MEDIUM Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p> <p>To exploit the v…	CWE-20 Improper Input Validation	CVE-2020-0904	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212149	6.5	MEDIUM Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p> <p>To exploit the v…	NVD-CWE-noinfo	CVE-2020-0890	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212150	7.8	HIGH Local	microsoft	windows_10 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated pr…	NVD-CWE-noinfo	CVE-2020-0886	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed