Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227191 7.5 危険 smartsitecms - smartSite CMS の articles.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0405 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
227192 6.8 警告 socialengine - SocialEngine の blog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0400 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
227193 7.8 危険 sony ericsson - Sony Ericsson W910i などの電話機におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0396 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
227194 7.5 危険 ple cms - PLEs CMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0394 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
227195 6.8 警告 sitexs cms - SiteXS CMS の post.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0371 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
227196 9.3 危険 wesnoth - Wesnoth の Python AI モジュールにおけるサンドボックスをエスケープされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0367 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
227197 4.3 警告 wesnoth - Wesnoth の src/server/simple_wml.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0366 2012-12-20 19:10 2009-03-12 Show GitHub Exploit DB Packet Storm
227198 9 危険 WING FTP software - WinFTP の WFTPSRV.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0351 2012-12-20 19:10 2009-01-29 Show GitHub Exploit DB Packet Storm
227199 7.2 危険 Niels Provos - x86_64 Linux 上で稼動している Niels Provos Systrace におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0342 2012-12-20 19:10 2009-01-29 Show GitHub Exploit DB Packet Storm
227200 6.8 警告 Quirm - Simple PHP Newsletter におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0340 2012-12-20 19:10 2009-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209661 6.5 MEDIUM
Network 		mozilla
canonical 		thunderbird
firefox_esr
firefox
ubuntu_linux 		The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file typ… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2020-15658 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209662 7.8 HIGH
Local 		mozilla firefox
firefox_esr
thunderbird 		Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. *Note: Thi… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-15657 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209663 8.8 HIGH
Network 		mozilla
opensuse
canonical 		thunderbird
firefox_esr
firefox
leap
ubuntu_linux 		JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only … CWE-843
Type Confusion 		CVE-2020-15656 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209664 6.5 MEDIUM
Network 		mozilla
opensuse
canonical 		thunderbird
firefox_esr
firefox
leap
ubuntu_linux 		A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. This vulnerability affe… NVD-CWE-noinfo
CVE-2020-15655 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209665 6.5 MEDIUM
Network 		mozilla
canonical 		thunderbird
firefox_esr
firefox
ubuntu_linux 		When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived brok… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-15654 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209666 6.5 MEDIUM
Network 		mozilla
canonical 		thunderbird
firefox_esr
firefox
ubuntu_linux 		An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed po… NVD-CWE-Other
CVE-2020-15653 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209667 6.5 MEDIUM
Network 		mozilla
canonical 		firefox
firefox_esr
thunderbird
ubuntu_linux 		By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulne… CWE-346
 Origin Validation Error 		CVE-2020-15652 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209668 4.3 MEDIUM
Network 		mozilla firefox A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS < … NVD-CWE-noinfo
CVE-2020-15651 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209669 5.5 MEDIUM
Local 		mozilla firefox_esr Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). *Note: This issue only a… NVD-CWE-noinfo
CVE-2020-15650 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209670 5.5 MEDIUM
Local 		mozilla firefox_esr Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-15649 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm