Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226651 7.5 危険 sql-ledger - SQL-Ledger の初期設定における管理操作を実行される脆弱性 CWE-16
環境設定
CVE-2009-4402 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
226652 7.5 危険 fr.simon rundell
TYPO3 Association
- TYPO3 用の Portsmouth Resources Database エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4396 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226653 7.5 危険 TYPO3 Association - TYPO3 用の XDS Staff List エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4392 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226654 5 警告 robert puntigam - TYPO3 用の watchdog エクステンションにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2009-4389 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226655 6.8 警告 Scriptsez.net - Scriptsez.net EPH におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4385 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226656 4.3 警告 Scriptsez.net - Scriptsez.net EPH におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4384 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226657 4.3 警告 phpfaber - PHPFABER CMS の module.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4382 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226658 4.3 警告 texmedia - texmedia Million Pixel Script の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4381 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226659 7.5 危険 Wafer - Valarsoft Webmatic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4380 2012-12-20 19:28 2009-12-14 Show GitHub Exploit DB Packet Storm
226660 4.3 警告 Wafer - Valarsoft Webmatic におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4379 2012-12-20 19:28 2009-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214071 3.3 LOW
Local
google android In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure … NVD-CWE-noinfo
CVE-2020-0422 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
214072 7.8 HIGH
Local
google android In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges need… CWE-787
CWE-755
 Out-of-bounds Write
 Improper Handling of Exceptional Conditions
CVE-2020-0421 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
214073 7.8 HIGH
Local
google android In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution pri… CWE-787
CWE-667
CWE-862
 Out-of-bounds Write
 Improper Locking
 Missing Authorization
CVE-2020-0420 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
214074 5.5 MEDIUM
Local
google android In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information dis… CWE-862
 Missing Authorization
CVE-2020-0419 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
214075 8.8 HIGH
Network
google android In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution pri… CWE-1188
 Insecure Default Initialization of Resource
CVE-2020-0416 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
214076 5.5 MEDIUM
Local
google android In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges … NVD-CWE-noinfo
CVE-2020-0415 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
214077 6.5 MEDIUM
Network
google android In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with… CWE-404
CWE-665
 Improper Resource Shutdown or Release
 Improper Initialization
CVE-2020-0414 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
214078 7.5 HIGH
Network
google android In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no … CWE-125
Out-of-bounds Read
CVE-2020-0413 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
214079 3.3 LOW
Local
google android In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution … CWE-862
 Missing Authorization
CVE-2020-0412 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
214080 6.5 MEDIUM
Network
google android In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges nee… CWE-787
CWE-908
 Out-of-bounds Write
 Use of Uninitialized Resource
CVE-2020-0411 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm