Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226961 7.5 危険 spirate - SPirate における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4936 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
226962 7.5 危険 winterwebs - EZ Webitor の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4933 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
226963 4.3 警告 sungard - SunGard Banner Student System の twbkwbis.P_SecurityQuestion ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4930 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
226964 7.5 危険 sweetphp - TotalCalendar の admin/manage_users.php における任意のパスワードを変更される脆弱性 CWE-287
不適切な認証 		CVE-2009-4929 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
226965 7.5 危険 sweetphp - TotalCalendar の config.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4928 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
226966 7.5 危険 webmobo - WB News における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-4927 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
226967 6.8 警告 UnrealIRCd - UnrealIRCd におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4893 2012-12-20 19:28 2010-06-15 Show GitHub Exploit DB Packet Storm
226968 7.5 危険 webjump - Content Management System WEBjump! における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4892 2012-12-20 19:28 2010-06-11 Show GitHub Exploit DB Packet Storm
226969 4.3 警告 retrieve - vBook のログインアプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4890 2012-12-20 19:28 2010-06-11 Show GitHub Exploit DB Packet Storm
226970 6.8 警告 sbuilder - CMS S.Builder の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4887 2012-12-20 19:28 2010-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224451 7.2 HIGH
Network 		geniusbytes genius_server The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitrary commands. NVD-CWE-noinfo
CVE-2019-16652 2024-11-21 13:30 2020-04-29 Show GitHub Exploit DB Packet Storm
224452 7.5 HIGH
Network 		mediawiki abusefilter An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and sum… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2019-16528 2024-11-21 13:30 2020-03-21 Show GitHub Exploit DB Packet Storm
224453 6.8 MEDIUM
Physics 		hom.ee brain_cube_core The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal … CWE-306
Missing Authentication for Critical Function 		CVE-2019-16258 2024-11-21 13:30 2020-03-21 Show GitHub Exploit DB Packet Storm
224454 7.5 HIGH
Network 		phpbb phpbb phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode. CWE-94
Code Injection 		CVE-2019-16108 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm
224455 9.8 CRITICAL
Network 		netsas enigma_network_management_solution An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of sh… CWE-78
OS Command  		CVE-2019-16072 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm
224456 8.8 HIGH
Network 		netsas enigma_nms Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settings in the system, only view the components. However, it is p… CWE-269
 Improper Privilege Management 		CVE-2019-16071 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm
224457 5.3 MEDIUM
Network 		mediawiki checkuser An issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit summaries are still visible in CheckUser results in violation of MediaWiki's permissions model. NVD-CWE-noinfo
CVE-2019-16529 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm
224458 5.4 MEDIUM
Network 		otrs otrs An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or cus… CWE-79
Cross-site Scripting 		CVE-2019-16375 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm
224459 7.8 HIGH
Local 		hancom hancom_office_neo The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file. CWE-416
 Use After Free 		CVE-2019-16338 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm
224460 7.8 HIGH
Local 		hancom hancom_office_neo The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file. CWE-416
 Use After Free 		CVE-2019-16337 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm