Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227521 6.5 警告 tufat - MyBackup の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-4977 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227522 7.5 危険 sweetphp - TotalCalendar の box_display.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4974 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
227523 7.5 危険 sweetphp - TotalCalendar の rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4973 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
227524 7.5 危険 vincent tietz - TYPO3 用の AJAX Chat エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4971 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
227525 7.5 危険 typo3-macher - TYPO3 用の t3m_affiliate エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4970 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
227526 7.5 危険 TYPO3 Association - TYPO3 用の SBbanner エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4969 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
227527 7.5 危険 thomas waggershauser - TYPO3 用の AIRware Lexicon エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4965 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
227528 5 警告 ViewVC - ViewVC における非公開 root 名を発見される脆弱性 CWE-200
情報漏えい
CVE-2010-0004 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
227529 4.3 警告 Urs Wolfer - kwebkitpart の webkitpart.cpp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4976 2012-12-20 19:28 2009-12-5 Show GitHub Exploit DB Packet Storm
227530 3.5 注意 TYPO3 Association - TYPO3 用の Commerce エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4963 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209131 5.4 MEDIUM
Network
jeesns jeesns A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title. CWE-79
Cross-site Scripting
CVE-2020-19287 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm
209132 5.4 MEDIUM
Network
jeesns jeesns A stored cross-site scripting (XSS) vulnerability in the /question/detail component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the source field… CWE-79
Cross-site Scripting
CVE-2020-19286 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm
209133 5.4 MEDIUM
Network
jeesns jeesns A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Name text field. CWE-79
Cross-site Scripting
CVE-2020-19285 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm
209134 5.4 MEDIUM
Network
jeesns jeesns A stored cross-site scripting (XSS) vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments… CWE-79
Cross-site Scripting
CVE-2020-19284 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm
209135 6.1 MEDIUM
Network
jeesns jeesns A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML. CWE-79
Cross-site Scripting
CVE-2020-19283 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm
209136 6.1 MEDIUM
Network
jeesns jeesns A reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. CWE-79
Cross-site Scripting
CVE-2020-19282 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm
209137 5.4 MEDIUM
Network
jeesns jeesns A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the usernam… CWE-79
Cross-site Scripting
CVE-2020-19281 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm
209138 8.8 HIGH
Network
jeesns jeesns Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sensitive program operations. CWE-352
 Origin Validation Error
CVE-2020-19280 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm
209139 5.7 MEDIUM
Network
dswjcms_project dswjcms A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users. CWE-352
 Origin Validation Error
CVE-2020-19268 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm
209140 9.8 CRITICAL
Network
dswjcms_project dswjcms An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-19267 2024-11-21 14:09 2021-09-10 Show GitHub Exploit DB Packet Storm