Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226161 6.5 警告 sql-ledger - SQL-Ledger の delete サブルーチンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3582 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
226162 3.5 注意 sql-ledger - SQL-Ledger におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3581 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
226163 6.8 警告 sql-ledger - SQL-Ledger の am.pl におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-3580 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
226164 10 危険 tatsuhiro tsujikawa - aria の DHTRoutingTableDeserializer.cc におけるバッファオーバーフローの脆弱性 CWE-noinfo
情報不足
CVE-2009-3575 2012-12-20 19:28 2009-10-7 Show GitHub Exploit DB Packet Storm
226165 9.3 危険 tony million - Tuniac におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-3574 2012-12-20 19:28 2009-10-6 Show GitHub Exploit DB Packet Storm
226166 2.6 注意 xerver - Xerver HTTP Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3562 2012-12-20 19:28 2009-10-5 Show GitHub Exploit DB Packet Storm
226167 5 警告 xerver - Xerver HTTP Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3561 2012-12-20 19:28 2009-10-5 Show GitHub Exploit DB Packet Storm
226168 2.1 注意 レッドハット - Red Hat JBoss Enterprise Application Platform の Twiddle における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2009-3554 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
226169 5 警告 Wireshark - Wireshark の SMB 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2009-3551 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
226170 5 警告 Wireshark - Wireshark の Paltalk 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-3549 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211261 7.8 HIGH
Local
ncp-e secure_enterprise_client NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant. CWE-59
Link Following
CVE-2020-11474 2024-11-21 13:57 2020-07-29 Show GitHub Exploit DB Packet Storm
211262 7.5 HIGH
Network
windriver vxworks httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. NVD-CWE-noinfo
CVE-2020-11440 2024-11-21 13:57 2020-07-23 Show GitHub Exploit DB Packet Storm
211263 8.8 HIGH
Network
librehealth librehealth_ehr LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR application. CWE-22
Path Traversal
CVE-2020-11439 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211264 8.8 HIGH
Network
librehealth librehealth_ehr LibreHealth EMR v2.0.0 is affected by systemic CSRF. CWE-352
 Origin Validation Error
CVE-2020-11438 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211265 4.3 MEDIUM
Network
librehealth librehealth_ehr LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database. CWE-89
SQL Injection
CVE-2020-11437 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211266 9.0 CRITICAL
Network
librehealth librehealth_ehr LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators. CWE-79
Cross-site Scripting
CVE-2020-11436 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211267 9.1 CRITICAL
Network
inetsoftware pdfc
helpdesk
clear_reports
The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on th… CWE-22
Path Traversal
CVE-2020-11431 2024-11-21 13:57 2020-05-8 Show GitHub Exploit DB Packet Storm
211268 7.5 HIGH
Network
openvpn openvpn_access_server An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management … CWE-776
XML Entity Expansion
CVE-2020-11462 2024-11-21 13:57 2020-05-4 Show GitHub Exploit DB Packet Storm
211269 8.1 HIGH
Network
zoom it_installer The Zoom IT installer for Windows (ZoomInstallerFull.msi) prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able t… CWE-59
CWE-732
Link Following
 Incorrect Permission Assignment for Critical Resource
CVE-2020-11443 2024-11-21 13:57 2020-05-4 Show GitHub Exploit DB Packet Storm
211270 7.8 HIGH
Local
eset internet_security
nod32_antivirus
smart_security
endpoint_security
endpoint_antivirus
mail_security
file_security
antivirus_and_antispyware
ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these… CWE-59
Link Following
CVE-2020-11446 2024-11-21 13:57 2020-04-29 Show GitHub Exploit DB Packet Storm