Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 12, 2026, 12:02 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 226271 | 4.3 | 警告 | zenas | - | Zenas PaoLink の scrivi.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3320 | 2012-12-20 19:28 | 2009-09-23 | Show | GitHub Exploit DB Packet Storm |
| 226272 | 7.5 | 危険 | thecodeweasel | - | OpenSiteAdmin の pages/pageHeader.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3317 | 2012-12-20 19:28 | 2009-09-23 | Show | GitHub Exploit DB Packet Storm |
| 226273 | 6.8 | 警告 | tomex | - | phpPollScript の php/init.poll.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3312 | 2012-12-20 19:28 | 2009-09-23 | Show | GitHub Exploit DB Packet Storm |
| 226274 | 4.3 | 警告 | rssmediascript | - | RSSMediaScript の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3311 | 2012-12-20 19:28 | 2009-09-23 | Show | GitHub Exploit DB Packet Storm |
| 226275 | 7.5 | 危険 | shalwan | - | Zainu の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3310 | 2012-12-20 19:28 | 2009-09-23 | Show | GitHub Exploit DB Packet Storm |
| 226276 | 7.5 | 危険 | richrumble | - | ClearSite の include/header.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3306 | 2012-12-20 19:28 | 2009-09-23 | Show | GitHub Exploit DB Packet Storm |
| 226277 | 5 | 警告 | pps.jussieu | - | Polipo におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-3305 | 2012-12-20 19:28 | 2009-12-24 | Show | GitHub Exploit DB Packet Storm |
| 226278 | 4.9 | 警告 | QNAP Systems | - | QNAP TS-239 Pro および TS-639 Pro における重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2009-3279 | 2012-12-20 19:28 | 2009-09-21 | Show | GitHub Exploit DB Packet Storm |
| 226279 | 4.9 | 警告 | QNAP Systems | - | QNAP TS-239 Pro などにおける鍵を特定される脆弱性 |
CWE-310
暗号の問題 |
CVE-2009-3278 | 2012-12-20 19:28 | 2009-09-21 | Show | GitHub Exploit DB Packet Storm |
| 226280 | 5 | 警告 | xenu by | - | datavault の DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2009-3277 | 2012-12-20 19:28 | 2009-09-21 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 12, 2026, 5:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 211081 | 8.8 |
HIGH
Network |
opmantek | open-audit | An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2020-11943 | 2024-11-21 13:58 | 2020-04-30 | Show | GitHub Exploit DB Packet Storm |
| 211082 | 9.8 |
CRITICAL
Network |
opmantek | open-audit | An issue was discovered in Open-AudIT 3.2.2. There are Multiple SQL Injections. |
CWE-89
SQL Injection |
CVE-2020-11942 | 2024-11-21 13:58 | 2020-04-30 | Show | GitHub Exploit DB Packet Storm |
| 211083 | 8.8 |
HIGH
Adjacent |
cerner | medico | Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3). |
CWE-120
Classic Buffer Overflow |
CVE-2020-11677 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 211084 | 8.8 |
HIGH
Adjacent |
cerner | medico | Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3). |
CWE-120
Classic Buffer Overflow |
CVE-2020-11676 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 211085 | 8.8 |
HIGH
Adjacent |
cerner | medico | Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3). |
CWE-120
Classic Buffer Overflow |
CVE-2020-11675 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 211086 | 8.8 |
HIGH
Adjacent |
cerner | medico | Cerner medico 26.00 allows variable reuse, possibly causing data corruption. |
NVD-CWE-noinfo
|
CVE-2020-11674 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 211087 | 7.0 |
HIGH
Local |
linux canonical debian fedoraproject netapp |
linux_kernel ubuntu_linux debian_linux fedora cloud_backup element_software steelstore_cloud_integrated_storage solidfire hci_management_node active_iq_unified_manager s… |
In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails… |
CWE-362
Race Condition |
CVE-2020-11884 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 211088 | 3.3 |
LOW
Local |
qemu | qemu | An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write op… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11869 | 2024-11-21 13:58 | 2020-04-28 | Show | GitHub Exploit DB Packet Storm |
| 211089 | 8.8 |
HIGH
Network |
opmantek | open-audit | An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery. |
CWE-78
OS Command |
CVE-2020-11941 | 2024-11-21 13:58 | 2020-04-28 | Show | GitHub Exploit DB Packet Storm |
| 211090 | 6.1 |
MEDIUM
Network |
rukovoditel | rukovoditel | In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page. Thus, an attacker can inject malicious script to steal all users' valuable data. |
CWE-79
Cross-site Scripting |
CVE-2020-11822 | 2024-11-21 13:58 | 2020-04-28 | Show | GitHub Exploit DB Packet Storm |