Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226281	6.8	警告	stewart howe	-	CelerBB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0851	2012-12-20 19:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

226282	7.8	危険	UMN	-	MapServer の mapser における任意のファイルの存在を特定される脆弱性	CWE-20 不適切な入力確認	CVE-2009-0843	2012-12-20 19:10	2009-03-31	Show	GitHub Exploit DB Packet Storm

226283	4.3	警告	UMN	-	MapServer の mapserv における任意の無効な .map ファイルを読み取られる脆弱性	CWE-200 情報漏えい	CVE-2009-0842	2012-12-20 19:10	2009-03-31	Show	GitHub Exploit DB Packet Storm

226284	10	危険	UMN	-	MapServer の mapserv におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-0841	2012-12-20 19:10	2009-03-31	Show	GitHub Exploit DB Packet Storm

226285	10	危険	UMN	-	MapServer の mapserv におけるヒープベースのバッファアンダーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0840	2012-12-20 19:10	2009-03-31	Show	GitHub Exploit DB Packet Storm

226286	10	危険	UMN	-	MapServer の mapserv におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0839	2012-12-20 19:10	2009-03-31	Show	GitHub Exploit DB Packet Storm

226287	6	警告	PHP-Fusion	-	PHP-Fusion 用の Members CV モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0831	2012-12-20 19:10	2009-03-5	Show	GitHub Exploit DB Packet Storm

226288	7.5	危険	torben sorensen	-	TinX/cms の system/rss.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0825	2012-12-20 19:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

226289	4.9	警告	slysoft	-	SlySoft AnyDVD などに同梱されている Elaborate Bytes ElbyCDIO.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0824	2012-12-20 19:10	2009-03-14	Show	GitHub Exploit DB Packet Storm

226290	4.3	警告	TYPO3 Association	-	TYPO3 の backend ユーザインタフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0816	2012-12-20 19:10	2009-03-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211201	9.8	CRITICAL Network	qualcomm	msm8960 mdm9607 mdm9650 msm8909w mdm9635m mdm9655 mdm9615 mdm9625 mdm9640 mdm9645 sdm630 qca6174a qca6574au qca6584au qca9379 msm8976 msm8952 apq809…	Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible device instability in Snapdragon Auto, Snapdragon Comp…	CWE-190 Integer Overflow or Wraparound	CVE-2020-11137	2024-11-21 13:56	2021-01-21	Show	GitHub Exploit DB Packet Storm

211202	9.8	CRITICAL Network	qualcomm	msm8960 mdm9206 mdm9607 mdm9650 msm8909w mdm9635m mdm9655 mdm9615 mdm9625 mdm9640 mdm9645 qca9379 msm8976 sdm630 qca6584au qca6584 qca6574au qca6174…	Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn…	CWE-125 Out-of-bounds Read	CVE-2020-11136	2024-11-21 13:56	2021-01-21	Show	GitHub Exploit DB Packet Storm

211203	9.8	CRITICAL Network	webswing	webswing	JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.	NVD-CWE-noinfo	CVE-2020-11103	2024-11-21 13:56	2020-12-31	Show	GitHub Exploit DB Packet Storm

211204	7.5	HIGH Network	linuxfoundation	indy-node	Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there is lack of signature verification on a s…	-	CVE-2020-11093	2024-11-21 13:56	2020-12-25	Show	GitHub Exploit DB Packet Storm

211205	5.3	MEDIUM Network	redhat	keycloak	A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this param…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-10770	2024-11-21 13:56	2020-12-16	Show	GitHub Exploit DB Packet Storm

211206	7.5	HIGH Network	nlnetlabs	unbound	An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query int…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-10772	2024-11-21 13:56	2020-11-28	Show	GitHub Exploit DB Packet Storm

211207	5.5	MEDIUM Local	heketi_project redhat	heketi enterprise_linux gluster_storage openshift_container_platform	An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive …	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-10763	2024-11-21 13:56	2020-11-25	Show	GitHub Exploit DB Packet Storm

211208	5.5	MEDIUM Local	redhat	gluster-block	An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes recording passwords to the cmd_history.log file wh…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-10762	2024-11-21 13:56	2020-11-25	Show	GitHub Exploit DB Packet Storm

211209	4.8	MEDIUM Network	redhat	keycloak	A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.	CWE-79 Cross-site Scripting	CVE-2020-10776	2024-11-21 13:56	2020-11-17	Show	GitHub Exploit DB Packet Storm

211210	7.1	HIGH Local	qualcomm	apq8009_firmware apq8096au_firmware apq8098_firmware mdm8207_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9207_firmware mdm9250_firmware mdm9607_firmware<…	u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT…	CWE-125 Out-of-bounds Read	CVE-2020-11132	2024-11-21 13:56	2020-11-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed