Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226141 4.3 警告 drunomics - Drupal 用の Temporary Invitation モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3914 2012-12-20 19:28 2009-11-4 Show GitHub Exploit DB Packet Storm
226142 7.5 危険 Xerox - Xerox Fiery Webtools の summary.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3913 2012-12-20 19:28 2009-11-9 Show GitHub Exploit DB Packet Storm
226143 5 警告 tftgallery - TFTgallery の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3912 2012-12-20 19:28 2009-11-9 Show GitHub Exploit DB Packet Storm
226144 4.3 警告 tftgallery - TFTgallery の settings.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3911 2012-12-20 19:28 2009-11-9 Show GitHub Exploit DB Packet Storm
226145 3.5 注意 WordPress.org - WordPress の wp-admin/press-this.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3891 2012-12-20 19:28 2009-11-12 Show GitHub Exploit DB Packet Storm
226146 6 警告 WordPress.org - WordPress の wp-includes/functions.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3890 2012-12-20 19:28 2009-11-12 Show GitHub Exploit DB Packet Storm
226147 9.3 危険 サン・マイクロシステムズ - Sun Java System Web Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3878 2012-12-20 19:28 2009-11-5 Show GitHub Exploit DB Packet Storm
226148 6.9 警告 SafeNet, Inc - SafeNet SoftRemote におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3861 2012-12-20 19:28 2009-11-4 Show GitHub Exploit DB Packet Storm
226149 4.3 警告 Softonic - Softonic International SciTE におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3857 2012-12-20 19:28 2009-11-4 Show GitHub Exploit DB Packet Storm
226150 4.3 警告 Strata Technologies - Twilight CMS の news/ のデフォルト URI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3856 2012-12-20 19:28 2009-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211241 7.8 HIGH
Local 		xen
fedoraproject
debian
opensuse 		xen
fedora
debian_linux
leap 		An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read… CWE-362
Race Condition 		CVE-2020-11739 2024-11-21 13:58 2020-04-14 Show GitHub Exploit DB Packet Storm
211242 7.8 HIGH
Local 		linux linux_kernel snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effe… NVD-CWE-noinfo
CVE-2020-11725 2024-11-21 13:58 2020-04-13 Show GitHub Exploit DB Packet Storm
211243 9.8 CRITICAL
Network 		konghq docker-kong An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on interfaces other than 127.0.0.1. NOTE: The vendor argue that this CVE is not a vulnerability b… NVD-CWE-Other
CVE-2020-11710 2024-11-21 13:58 2020-04-13 Show GitHub Exploit DB Packet Storm
211244 5.3 MEDIUM
Network 		argoproj argo_cd Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid (non-SSO) accounts because /api/v1/session returned… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-11576 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
211245 9.8 CRITICAL
Network 		sqlite
netapp
oracle
siemens
tenable 		sqlite
ontap_select_deploy_administration_utility
outside_in_technology
hyperion_infrastructure_technology
enterprise_manager_ops_center
mysql
communications_network_charging_and_co… 		In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement. CWE-416
 Use After Free 		CVE-2020-11656 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
211246 7.5 HIGH
Network 		sqlite
netapp
debian
canonical
oracle
siemens
tenable 		sqlite
ontap_select_deploy_administration_utility
debian_linux
ubuntu_linux
outside_in_technology
instantis_enterprisetrack
hyperion_infrastructure_technology
enterprise_manager_… 		SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled. CWE-665
 Improper Initialization 		CVE-2020-11655 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
211247 5.3 MEDIUM
Network 		google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Notification exposure occurs in Lockdown mode because of the Edge Lighting application. The Samsung ID is SVE-2020-… NVD-CWE-noinfo
CVE-2020-11607 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
211248 2.4 LOW
Physics 		google android An issue was discovered on Samsung mobile devices with Q(10.0) software. Information about application preview (in the Secure Folder) leaks on a locked device. The Samsung ID is SVE-2019-16463 (April… NVD-CWE-noinfo
CVE-2020-11606 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
211249 7.5 HIGH
Network 		google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. There is sensitive information exposure from dumpstate in NFC logs. The Samsung ID is SVE-2019-16359 (Apri… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-11605 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
211250 9.1 CRITICAL
Network 		google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software. There is an Out-of-bounds read in the MLDAP Trustlet. The Samsung ID is SVE-2019-16565 (Apr… CWE-125
Out-of-bounds Read 		CVE-2020-11604 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm