Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226281 6.8 警告 stewart howe - CelerBB における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0851 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
226282 7.8 危険 UMN - MapServer の mapser における任意のファイルの存在を特定される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0843 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
226283 4.3 警告 UMN - MapServer の mapserv における任意の無効な .map ファイルを読み取られる脆弱性 CWE-200
情報漏えい 		CVE-2009-0842 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
226284 10 危険 UMN - MapServer の mapserv におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0841 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
226285 10 危険 UMN - MapServer の mapserv におけるヒープベースのバッファアンダーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0840 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
226286 10 危険 UMN - MapServer の mapserv におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0839 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
226287 6 警告 PHP-Fusion - PHP-Fusion 用の Members CV モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0831 2012-12-20 19:10 2009-03-5 Show GitHub Exploit DB Packet Storm
226288 7.5 危険 torben sorensen - TinX/cms の system/rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0825 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
226289 4.9 警告 slysoft - SlySoft AnyDVD などに同梱されている Elaborate Bytes ElbyCDIO.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-0824 2012-12-20 19:10 2009-03-14 Show GitHub Exploit DB Packet Storm
226290 4.3 警告 TYPO3 Association - TYPO3 の backend ユーザインタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0816 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197311 8.8 HIGH
Network 		accusoft imagegear An exploitable out-of-bounds write vulnerability exists in the ico_read function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds wri… CWE-787
 Out-of-bounds Write 		CVE-2020-6082 2024-11-21 14:35 2020-05-6 Show GitHub Exploit DB Packet Storm
197312 8.8 HIGH
Network 		accusoft imagegear An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted ICO file can cause an out-of-bounds write… CWE-787
 Out-of-bounds Write 		CVE-2020-6076 2024-11-21 14:35 2020-05-6 Show GitHub Exploit DB Packet Storm
197313 8.8 HIGH
Network 		accusoft imagegear An exploitable out-of-bounds write vulnerability exists in the store_data_buffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-b… CWE-787
 Out-of-bounds Write 		CVE-2020-6075 2024-11-21 14:35 2020-05-6 Show GitHub Exploit DB Packet Storm
197314 6.1 MEDIUM
Network 		sap netweaver_as_abap_business_server_pages SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting (XSS) via … CWE-79
Cross-site Scripting 		CVE-2020-6213 2024-11-21 14:35 2020-04-25 Show GitHub Exploit DB Packet Storm
197315 5.4 MEDIUM
Network 		sap erp
s\/4hana 		Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do no… CWE-862
 Missing Authorization 		CVE-2020-6212 2024-11-21 14:35 2020-04-25 Show GitHub Exploit DB Packet Storm
197316 6.1 MEDIUM
Network 		sap netweaver_as_abap_business_server_pages SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in re… CWE-79
Cross-site Scripting 		CVE-2020-6217 2024-11-21 14:35 2020-04-15 Show GitHub Exploit DB Packet Storm
197317 6.1 MEDIUM
Network 		sap netweaver_as_abap_business_server_pages SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insu… CWE-601
Open Redirect 		CVE-2020-6215 2024-11-21 14:35 2020-04-15 Show GitHub Exploit DB Packet Storm
197318 6.1 MEDIUM
Network 		sap businessobjects_business_intelligence_platform SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials … CWE-601
Open Redirect 		CVE-2020-6211 2024-11-21 14:35 2020-04-15 Show GitHub Exploit DB Packet Storm
197319 9.8 CRITICAL
Network 		sap businessobjects_business_intelligence_platform SAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to ga… CWE-319
CWE-522
Cleartext Transmission of Sensitive Information
 Insufficiently Protected Credentials 		CVE-2020-6195 2024-11-21 14:35 2020-04-15 Show GitHub Exploit DB Packet Storm
197320 9.3 CRITICAL
Network 		sap commerce_cloud SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the Rest API from Servlet xyformsweb, leading to Missing XML Validation. This affects confidentiality and a… CWE-611
XXE 		CVE-2020-6238 2024-11-21 14:35 2020-04-15 Show GitHub Exploit DB Packet Storm