Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226491 6.4 警告 scripts.oldguy - TalkBack におけるコメントを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4874 2012-12-20 19:28 2010-05-26 Show GitHub Exploit DB Packet Storm
226492 10 危険 rhinosoft - Rhino Software Serv-U Web Client の HTTP サーバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4873 2012-12-20 19:28 2010-05-26 Show GitHub Exploit DB Packet Storm
226493 7.5 危険 phpcityportal - PHPCityPortal の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4870 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
226494 4.3 警告 tony million - Tuniac におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4867 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
226495 4.3 警告 PunBB - PunBB の profile.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4894 2012-12-20 19:28 2009-05-20 Show GitHub Exploit DB Packet Storm
226496 9.3 危険 ultraplayer - UltraPlayer Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4863 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
226497 4.3 警告 supportpro - SupportPRO SupportDesk の shownews.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4861 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
226498 4.3 警告 turnkeyforms - Yahoo Answers Clone の questiondetail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4858 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
226499 7.5 危険 scripts.oldguy - TalkBack の addons/import.php における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4854 2012-12-20 19:28 2010-05-7 Show GitHub Exploit DB Packet Storm
226500 6.8 警告 toutvirtual - ToutVirtual VirtualIQ Pro におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4849 2012-12-20 19:28 2010-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210331 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system that does not provide sufficient complexity to protect against brute force attacks, which may allow u… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-14494 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210332 6.5 MEDIUM
Network 		openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing SQL queries, which may allow a low-privilege user to access privileged information. CWE-862
 Missing Authorization 		CVE-2020-14491 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210333 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow exec… CWE-287
Improper Authentication 		CVE-2020-14485 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210334 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brute force password attacks. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-14484 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210335 7.3 HIGH
Local 		oracle solaris Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged … NVD-CWE-noinfo
CVE-2020-14724 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210336 8.2 HIGH
Network 		oracle help_technologies Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware (component: Web UIX). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerab… NVD-CWE-noinfo
CVE-2020-14723 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210337 5.8 MEDIUM
Network 		oracle enterprise_communications_broker Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are affected are 3.0.0-3.2.0. Difficult to expl… NVD-CWE-noinfo
CVE-2020-14722 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210338 6.3 MEDIUM
Network 		oracle enterprise_communications_broker Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are affected are 3.0.0-3.2.0. Easily exploitabl… NVD-CWE-noinfo
CVE-2020-14721 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210339 7.7 HIGH
Network 		oracle internet_expenses Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affected are 12.2.4-12.2.9. Easily exploitab… NVD-CWE-noinfo
CVE-2020-14720 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210340 9.8 CRITICAL
Network 		moxa edr-g902-t_firmware
edr-g902_firmware
edr-g903-t_firmware
edr-g903_firmware 		Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4). CWE-787
 Out-of-bounds Write 		CVE-2020-14511 2024-11-21 14:03 2020-07-15 Show GitHub Exploit DB Packet Storm