Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226991 7.5 危険 phpscriptsnow - PHP Scripts Now President Bios の bios.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2886 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
226992 7.5 危険 phpscriptsnow - PHP Scripts Now World's Tallest Buildings の bios.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2885 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
226993 4.3 警告 phpscriptsnow - PHP Scripts Now World's Tallest Buildings の bios.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2884 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
226994 3.5 注意 サン・マイクロシステムズ - Sun VDI における VDI 設定データを平文で読まれる脆弱性 CWE-200
情報漏えい
CVE-2009-2856 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
226995 6.4 警告 WordPress.org - Wordpress における許可されていない編集などをされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2854 2012-12-20 19:10 2009-08-3 Show GitHub Exploit DB Packet Storm
226996 10 危険 WordPress.org - Wordpress における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2853 2012-12-20 19:10 2009-08-3 Show GitHub Exploit DB Packet Storm
226997 6.8 警告 ryan.mcgeary - Wordpress 用の WP-Syntax プラグインにおける任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2009-2852 2012-12-20 19:10 2009-08-18 Show GitHub Exploit DB Packet Storm
226998 4.3 警告 WordPress.org - WordPress の管理者インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2851 2012-12-20 19:10 2009-07-20 Show GitHub Exploit DB Packet Storm
226999 7.5 危険 webdynamite - WebDynamite ProjectButler の pda_projects.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-2791 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
227000 7.5 危険 softbiz - SoftBiz Dating Script の cat_products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2790 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312001 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: rtmutex: Drop rt_mutex::wait_lock before scheduling rt_mutex_handle_deadlock() is called with rt_mutex::wait_lock held. In the g… CWE-667
 Improper Locking
CVE-2024-46829 2024-10-2 23:27 2024-09-27 Show GitHub Exploit DB Packet Storm
312002 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear use-after-free error. We remove it, and rely on chec… CWE-416
 Use After Free
CVE-2024-46831 2024-10-2 23:26 2024-09-27 Show GitHub Exploit DB Packet Storm
312003 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix smatch static checker warning adev->gfx.imu.funcs could be NULL CWE-476
 NULL Pointer Dereference
CVE-2024-46835 2024-10-2 23:24 2024-09-27 Show GitHub Exploit DB Packet Storm
312004 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry In a review discussion of the changes to support vCPU hotplug… CWE-476
 NULL Pointer Dereference
CVE-2024-46822 2024-10-2 23:24 2024-09-27 Show GitHub Exploit DB Packet Storm
312005 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range [Why & How] ASSERT if return NULL from kcalloc. CWE-476
 NULL Pointer Dereference
CVE-2024-46808 2024-10-2 23:23 2024-09-27 Show GitHub Exploit DB Packet Storm
312006 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: um: line: always fill *error_out in setup_one_line() The pointer isn't initialized by callers, but I have encountered cases where… CWE-824
 Access of Uninitialized Pointer
CVE-2024-46844 2024-10-2 23:22 2024-09-27 Show GitHub Exploit DB Packet Storm
312007 5.4 MEDIUM
Network
millbeckcommunications proroute_h685t-w_firmware This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser, allowing an attacker to execute arbitrary JavaScript in the context of the vi… CWE-79
Cross-site Scripting
CVE-2024-38380 2024-10-2 23:22 2024-09-18 Show GitHub Exploit DB Packet Storm
312008 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Only clear timer if a kthread exists The timerlat tracer can use user space threads to check for osnoise and ti… CWE-416
 Use After Free
CVE-2024-46845 2024-10-2 23:18 2024-09-27 Show GitHub Exploit DB Packet Storm
312009 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mm: vmalloc: ensure vmap_block is initialised before adding to queue Commit 8c61291fd850 ("mm: fix incorrect vbq reference in pur… CWE-129
 Improper Validation of Array Index
CVE-2024-46847 2024-10-2 23:16 2024-09-27 Show GitHub Exploit DB Packet Storm
312010 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change When disabling wifi mt7921_ipv6_addr_change() is called as… CWE-476
 NULL Pointer Dereference
CVE-2024-46860 2024-10-2 23:04 2024-09-27 Show GitHub Exploit DB Packet Storm