Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226111 7.5 危険 templateplaza - Joomla! 用の tpdugg コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4628 2012-12-20 19:28 2010-01-18 Show GitHub Exploit DB Packet Storm
226112 7.5 危険 phpnagios - phpNagios の menu.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4626 2012-12-20 19:28 2010-01-18 Show GitHub Exploit DB Packet Storm
226113 7.5 危険 Tamlyn Creative Pty - Joomla! 用の bfsurvey コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4625 2012-12-20 19:28 2010-01-18 Show GitHub Exploit DB Packet Storm
226114 7.5 危険 Plohni - Advanced Comment System における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4623 2012-12-20 19:28 2010-01-18 Show GitHub Exploit DB Packet Storm
226115 7.5 危険 tourismscripts - Tourism Script Bus Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4618 2012-12-20 19:28 2010-01-18 Show GitHub Exploit DB Packet Storm
226116 7.5 危険 tourismscripts - Tourism Script Accommodation Hotel Booking Portal Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4617 2012-12-20 19:28 2010-01-18 Show GitHub Exploit DB Packet Storm
226117 7.2 危険 south river technologies - South River Technologies WebDrive におけるサービスを停止される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4606 2012-12-20 19:28 2010-01-13 Show GitHub Exploit DB Packet Storm
226118 5 警告 The phpMyAdmin Project - phpMyAdmin の scripts/setup.php におけるクロスサイトリクエストフォージェリ (CSRF) 攻撃を実行される脆弱性 CWE-DesignError
CVE-2009-4605 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
226119 5 警告 SAP - SAP Kernel の sapstartsrv.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4603 2012-12-20 19:28 2010-01-12 Show GitHub Exploit DB Packet Storm
226120 4.3 警告 zeeways - Zeeways ZeeJobsite の basic_search_result.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4601 2012-12-20 19:28 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213111 9.6 CRITICAL
Network 		microsoft application_inspector A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output, aka '… CWE-79
Cross-site Scripting 		CVE-2020-0872 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
213112 5.5 MEDIUM
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Windows Network Connections Service Information Disclosure Vul… NVD-CWE-noinfo
CVE-2020-0871 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
213113 8.8 HIGH
Network 		microsoft windows_10
windows_server_2016
windows_server_2019 		A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-202… CWE-787
 Out-of-bounds Write 		CVE-2020-0869 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
213114 7.8 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnera… NVD-CWE-noinfo
CVE-2020-0868 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
213115 7.8 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnera… NVD-CWE-noinfo
CVE-2020-0867 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
213116 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CV… NVD-CWE-noinfo
CVE-2020-0866 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
213117 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CV… NVD-CWE-noinfo
CVE-2020-0865 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
213118 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CV… NVD-CWE-noinfo
CVE-2020-0864 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
213119 5.5 MEDIUM
Local 		microsoft windows_server_2016
windows_10 		An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Informat… NVD-CWE-noinfo
CVE-2020-0863 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
213120 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019 		An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to … NVD-CWE-noinfo
CVE-2020-0861 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm