Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226121 7.5 危険 Pragyan CMS Project - index.php Pragyan CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1480 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
226122 7.5 危険 razorCMS - razorCMS における任意のページへ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2009-1463 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
226123 7.2 危険 razorCMS - razorCMS の Security Manager における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1462 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
226124 3.5 注意 razorCMS - razorCMS の Create New Page フォームにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1461 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
226125 4.6 警告 razorCMS - razorCMS における管理者のパスワードハッシュを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1460 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
226126 6.8 警告 razorCMS - razorCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-1459 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
226127 4.3 警告 razorCMS - razorCMS の admin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1458 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
226128 6.5 警告 stephane rajalu - Malleo の admin.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-1456 2012-12-20 19:10 2009-04-28 Show GitHub Exploit DB Packet Storm
226129 7.5 危険 webportal - WebPortal CMS の indexk.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-1444 2012-12-20 19:10 2009-04-27 Show GitHub Exploit DB Packet Storm
226130 2.1 注意 トレンドマイクロ - Trend Micro OfficeScan Client の NTRtScan.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-1435 2012-12-20 19:10 2009-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211981 7.8 HIGH
Local
google android In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges need… CWE-787
CWE-755
 Out-of-bounds Write
 Improper Handling of Exceptional Conditions
CVE-2020-0421 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211982 7.8 HIGH
Local
google android In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution pri… CWE-787
CWE-667
CWE-862
 Out-of-bounds Write
 Improper Locking
 Missing Authorization
CVE-2020-0420 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211983 5.5 MEDIUM
Local
google android In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information dis… CWE-862
 Missing Authorization
CVE-2020-0419 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211984 8.8 HIGH
Network
google android In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution pri… CWE-1188
 Insecure Default Initialization of Resource
CVE-2020-0416 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211985 5.5 MEDIUM
Local
google android In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges … NVD-CWE-noinfo
CVE-2020-0415 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211986 6.5 MEDIUM
Network
google android In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with… CWE-404
CWE-665
 Improper Resource Shutdown or Release
 Improper Initialization
CVE-2020-0414 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211987 7.5 HIGH
Network
google android In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no … CWE-125
Out-of-bounds Read
CVE-2020-0413 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211988 3.3 LOW
Local
google android In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution … CWE-862
 Missing Authorization
CVE-2020-0412 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211989 6.5 MEDIUM
Network
google android In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges nee… CWE-787
CWE-908
 Out-of-bounds Write
 Use of Uninitialized Resource
CVE-2020-0411 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211990 5.5 MEDIUM
Local
google android In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User i… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-0410 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm