Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226111 10 危険 slsknet - Soulseek におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1830 2012-12-20 19:10 2009-05-29 Show GitHub Exploit DB Packet Storm
226112 9.3 危険 sonicspot - Sonic Spot Audioactive Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1815 2012-12-20 19:10 2009-05-29 Show GitHub Exploit DB Packet Storm
226113 7.5 危険 submitterscript - Submitter Script の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1813 2012-12-20 19:10 2009-05-29 Show GitHub Exploit DB Packet Storm
226114 7.5 危険 videoscript - VideoScript.us YouTube Video Script の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1804 2012-12-20 19:10 2009-05-28 Show GitHub Exploit DB Packet Storm
226115 6.8 警告 sebastian-thiele - ST-Gallery の st_admin/gallery_output.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1799 2012-12-20 19:10 2009-05-28 Show GitHub Exploit DB Packet Storm
226116 4.3 警告 サン・マイクロシステムズ - Sun Java System Portal Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1796 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
226117 9.3 危険 stonetrip - StoneTrip Ston3D StandalonePlayer および WebPlayer の system.openURL 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2009-1792 2012-12-20 19:10 2009-05-29 Show GitHub Exploit DB Packet Storm
226118 7.5 危険 phpdirsubmit - PHP Dir Submit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1787 2012-12-20 19:10 2009-05-26 Show GitHub Exploit DB Packet Storm
226119 4.3 警告 ulteo - Ulteo Open Virtual Desktop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1785 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
226120 6.8 警告 roboform - Frax.dk Php Recommend の admin.php における phpre_config.php へ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1781 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197541 5.4 MEDIUM
Network 		riken xoonips Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2020-5662 2024-11-21 14:34 2020-11-16 Show GitHub Exploit DB Packet Storm
197542 8.8 HIGH
Network 		riken xoonips SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2020-5659 2024-11-21 14:34 2020-11-16 Show GitHub Exploit DB Packet Storm
197543 7.5 HIGH
Network 		mitsubishielectric melsec_iq-r00_firmware
melsec_iq-r01_firmware
melsec_iq-r02_firmware
melsec_iq-r04_firmware
melsec_iq-r16_firmware
melsec_iq-r08_firmware
melsec_iq-r32_firmware
melsec_iq-r120_fi… 		Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51') al… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-5666 2024-11-21 14:34 2020-11-16 Show GitHub Exploit DB Packet Storm
197544 7.8 HIGH
Local 		nagios nagios_xi Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged, authenticated user to weaken the permissions of files, resulting in low-privileged users being able to write to… CWE-281
 Improper Preservation of Permissions 		CVE-2020-5796 2024-11-21 14:34 2020-11-14 Show GitHub Exploit DB Packet Storm
197545 7.5 HIGH
Network 		valvesoftware game_networking_sockets Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from li… NVD-CWE-noinfo
CVE-2020-6019 2024-11-21 14:34 2020-11-14 Show GitHub Exploit DB Packet Storm
197546 7.8 HIGH
Local 		nvidia geforce_now NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to bin… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-5992 2024-11-21 14:34 2020-11-12 Show GitHub Exploit DB Packet Storm
197547 9.8 CRITICAL
Network 		vmware pivotal_scheduler Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-5426 2024-11-21 14:34 2020-11-12 Show GitHub Exploit DB Packet Storm
197548 6.9 MEDIUM
Physics 		dell inspiron_15_7579_firmware Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-5388 2024-11-21 14:34 2020-11-11 Show GitHub Exploit DB Packet Storm
197549 7.8 HIGH
Local 		tenable nessus_network_monitor A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a spe… NVD-CWE-noinfo
CVE-2020-5794 2024-11-21 14:34 2020-11-7 Show GitHub Exploit DB Packet Storm
197550 6.2 MEDIUM
Physics 		tp-link archer_a7_firmware UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a craft… CWE-59
Link Following 		CVE-2020-5795 2024-11-21 14:34 2020-11-7 Show GitHub Exploit DB Packet Storm