Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226381 7.5 危険 ple cms - PLEs CMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0394 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
226382 6.8 警告 sitexs cms - SiteXS CMS の post.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0371 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
226383 9.3 危険 wesnoth - Wesnoth の Python AI モジュールにおけるサンドボックスをエスケープされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0367 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
226384 4.3 警告 wesnoth - Wesnoth の src/server/simple_wml.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0366 2012-12-20 19:10 2009-03-12 Show GitHub Exploit DB Packet Storm
226385 9 危険 WING FTP software - WinFTP の WFTPSRV.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0351 2012-12-20 19:10 2009-01-29 Show GitHub Exploit DB Packet Storm
226386 7.2 危険 Niels Provos - x86_64 Linux 上で稼動している Niels Provos Systrace におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0342 2012-12-20 19:10 2009-01-29 Show GitHub Exploit DB Packet Storm
226387 6.8 警告 Quirm - Simple PHP Newsletter におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0340 2012-12-20 19:10 2009-01-29 Show GitHub Exploit DB Packet Storm
226388 7.8 危険 Quirm - ESPG の gallery/comment.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0331 2012-12-20 19:10 2009-01-29 Show GitHub Exploit DB Packet Storm
226389 6.8 警告 wss-pro - SCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0330 2012-12-20 19:10 2009-01-29 Show GitHub Exploit DB Packet Storm
226390 5 警告 robs-projects - ROBS-PROJECTS Digital Sales IPN におけるユーザ資格情報を含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0328 2012-12-20 19:10 2009-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212761 7.5 HIGH
Network 		putty
fedoraproject
debian
netapp
opensuse 		putty
fedora
debian_linux
oncommand_unified_manager
leap 		A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification. CWE-320
 Key Management Errors 		CVE-2019-9894 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
212762 9.8 CRITICAL
Network 		libseccomp_project libseccomp libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and poten… NVD-CWE-noinfo
CVE-2019-9893 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
212763 2.7 LOW
Network 		vanillaforums vanilla In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal wit… CWE-22
Path Traversal 		CVE-2019-9889 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
212764 7.8 HIGH
Local 		pdfalto_project
xpdfreader 		pdfalto
xpdf 		There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a c… CWE-125
Out-of-bounds Read 		CVE-2019-9878 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
212765 7.8 HIGH
Local 		xpdfreader xpdf There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2019-9877 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
212766 9.8 CRITICAL
Network 		oembed_project oembed plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements. CWE-19
 Data Processing Errors 		CVE-2019-9870 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
212767 7.2 HIGH
Network 		veritas netbackup_appliance An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator. CWE-522
 Insufficiently Protected Credentials 		CVE-2019-9868 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
212768 7.2 HIGH
Network 		veritas netbackup_appliance An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator. CWE-522
 Insufficiently Protected Credentials 		CVE-2019-9867 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
212769 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark()… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-9857 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
212770 6.1 MEDIUM
Network 		openid openid_connect Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that result… CWE-601
Open Redirect 		CVE-2019-9837 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm