Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226581	9.3	危険	quiksoft	-	Quiksoft EasyMail Objects ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4663	2012-12-20 19:28	2010-03-3	Show	GitHub Exploit DB Packet Storm

226582	7.5	危険	templateplaza	-	Joomla! 用の tpdugg コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4628	2012-12-20 19:28	2010-01-18	Show	GitHub Exploit DB Packet Storm

226583	7.5	危険	phpnagios	-	phpNagios の menu.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4626	2012-12-20 19:28	2010-01-18	Show	GitHub Exploit DB Packet Storm

226584	7.5	危険	Tamlyn Creative Pty	-	Joomla! 用の bfsurvey コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4625	2012-12-20 19:28	2010-01-18	Show	GitHub Exploit DB Packet Storm

226585	7.5	危険	Plohni	-	Advanced Comment System における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-4623	2012-12-20 19:28	2010-01-18	Show	GitHub Exploit DB Packet Storm

226586	7.5	危険	tourismscripts	-	Tourism Script Bus Script における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4618	2012-12-20 19:28	2010-01-18	Show	GitHub Exploit DB Packet Storm

226587	7.5	危険	tourismscripts	-	Tourism Script Accommodation Hotel Booking Portal Script における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4617	2012-12-20 19:28	2010-01-18	Show	GitHub Exploit DB Packet Storm

226588	7.2	危険	south river technologies	-	South River Technologies WebDrive におけるサービスを停止される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4606	2012-12-20 19:28	2010-01-13	Show	GitHub Exploit DB Packet Storm

226589	5	警告	The phpMyAdmin Project	-	phpMyAdmin の scripts/setup.php におけるクロスサイトリクエストフォージェリ (CSRF) 攻撃を実行される脆弱性	CWE-DesignError	CVE-2009-4605	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226590	5	警告	SAP	-	SAP Kernel の sapstartsrv.exe におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4603	2012-12-20 19:28	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223001	9.8	CRITICAL Network	-	-	eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi …	CWE-306 Missing Authentication for Critical Function	CVE-2019-18939	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

223002	9.8	CRITICAL Network	eq-3 hm_email_project	homematic_ccu2_firmware hm_email homematic_ccu3_firmware	eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi…	CWE-306 Missing Authentication for Critical Function	CVE-2019-18938	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

223003	9.8	CRITICAL Network	-	-	eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.…	CWE-306 Missing Authentication for Critical Function	CVE-2019-18937	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

223004	4.8	MEDIUM Network	untangle	ng_firewall	When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.	CWE-79 Cross-site Scripting	CVE-2019-18649	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

223005	4.8	MEDIUM Network	untangle	ng_firewall	When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.	CWE-79 Cross-site Scripting	CVE-2019-18648	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

223006	7.2	HIGH Network	untangle	ng_firewall	The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user.	CWE-77 Command Injection	CVE-2019-18647	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

223007	7.2	HIGH Network	untangle	ng_firewall	The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user.	CWE-89 SQL Injection	CVE-2019-18646	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

223008	6.1	MEDIUM Network	microstrategy	microstrategy_library	Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS.	CWE-79 Cross-site Scripting	CVE-2019-18957	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

223009	7.8	HIGH Local	scanguard	scanguard_antivirus	Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-18895	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

223010	5.5	MEDIUM Local	linux	linux_kernel	fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, ak…	CWE-476 NULL Pointer Dereference	CVE-2019-18885	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed