Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227901 6.8 警告 yanocc - YANOCC の check_lang.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0515 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
227902 7.5 危険 webframe - WebFrame におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0514 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
227903 7.5 危険 webframe - WebFrame における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0513 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
227904 10 危険 simpleircbot - SimpleIrcBot における脆弱性 CWE-287
不適切な認証 		CVE-2009-0492 2012-12-20 19:10 2009-02-9 Show GitHub Exploit DB Packet Storm
227905 2.1 注意 David Paleino - Wicd の DBus configuration file における Wicd デーモンへのメッセージを受信される脆弱性 CWE-16
環境設定 		CVE-2009-0489 2012-12-20 19:10 2009-02-9 Show GitHub Exploit DB Packet Storm
227906 5 警告 Rockwell Automation - Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module の Web インターフェースにおける "内部の Web ページ情報" などを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-0474 2012-12-20 19:10 2009-02-6 Show GitHub Exploit DB Packet Storm
227907 4.3 警告 vivvo - Vivvo CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0466 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
227908 9.3 危険 synactis - Synactis ALL In-The-Box ActiveX の ALL_IN_THE_BOX.OCX における任意のファイルを作成される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0465 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
227909 7.5 危険 wholehogsoftware - Whole Hog Password Protec における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-0461 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
227910 7.5 危険 wholehogsoftware - Whole Hog Ware Support における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-0460 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215071 7.8 HIGH
Local 		google android In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the system server with no additional execu… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2020-0136 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm
215072 4.4 MEDIUM
Local 		google android In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privi… CWE-862
 Missing Authorization 		CVE-2020-0135 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm
215073 5.5 MEDIUM
Local 		google android In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed.… CWE-909
 Missing Initialization of Resource 		CVE-2020-0134 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm
215074 7.3 HIGH
Local 		google android In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. This could lead to local escalation of privilege with User execution pr… CWE-276
Incorrect Default Permissions  		CVE-2020-0133 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm
215075 5.5 MEDIUM
Local 		google android In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional executio… CWE-125
CWE-502
Out-of-bounds Read
 Deserialization of Untrusted Data 		CVE-2020-0132 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm
215076 8.8 HIGH
Network 		google android In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution with no additional execution privileges nee… CWE-787
 Out-of-bounds Write 		CVE-2020-0131 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm
215077 7.8 HIGH
Local 		google android In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges n… CWE-787
 Out-of-bounds Write 		CVE-2020-0129 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm
215078 7.5 HIGH
Network 		google android In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required… CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2020-0128 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm
215079 6.5 MEDIUM
Network 		google android In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additiona… CWE-125
Out-of-bounds Read 		CVE-2020-0127 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm
215080 6.4 MEDIUM
Local 		google android In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2020-0126 2024-11-21 13:52 2020-06-12 Show GitHub Exploit DB Packet Storm