Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227941 7.5 危険 ruven pillay - IIPImage Server の FastCGI プログラムにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4230 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
227942 4.3 警告 Xfig project - Xfig の u_bound.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4228 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
227943 6.8 警告 Xfig project - Xfig の f_readold.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4227 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
227944 7.1 危険 サン・マイクロシステムズ - Sun OpenSolaris のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2009-4226 2012-12-20 19:28 2009-12-3 Show GitHub Exploit DB Packet Storm
227945 7.5 危険 smartisoft - phpBazar における管理コントロールパネルへのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4222 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
227946 7.5 危険 smartisoft - phpBazar の classified.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4221 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
227947 7.5 危険 raphael mazoyer - PointComma の includes/classes/pctemplate.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4220 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
227948 7.5 危険 ringsworld - Flashlight Free Edition の admin.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4205 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
227949 7.5 危険 ringsworld - Flashlight Free Edition の read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4204 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
227950 7.5 危険 vollmar - Joomla! 用の Seminar コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4200 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208381 7.5 HIGH
Network 		squid-cache
canonical
debian
fedoraproject
opensuse 		squid
ubuntu_linux
debian_linux
fedora
leap 		Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only o… CWE-667
 Improper Locking 		CVE-2020-24606 2024-11-21 14:15 2020-08-25 Show GitHub Exploit DB Packet Storm
208382 6.5 MEDIUM
Network 		wso2 identity_server_analytics
api_microgateway
api_manager
enterprise_integrator
api_manager_analytics 		The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manager through 3.0.0, API Manager Analytics 2.2.0 and 2.5.0, API Microgateway 2.2.0,… CWE-611
XXE 		CVE-2020-24591 2024-11-21 14:15 2020-08-22 Show GitHub Exploit DB Packet Storm
208383 9.1 CRITICAL
Network 		wso2 api_microgateway
api_manager 		The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks. CWE-776
XML Entity Expansion 		CVE-2020-24590 2024-11-21 14:15 2020-08-22 Show GitHub Exploit DB Packet Storm
208384 9.1 CRITICAL
Network 		wso2 api_microgateway
api_manager 		The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks. CWE-611
XXE 		CVE-2020-24589 2024-11-21 14:15 2020-08-22 Show GitHub Exploit DB Packet Storm
208385 5.3 MEDIUM
Network 		wolfssl wolfssl An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do not produce an out-of-order error. Instead, these messages are… NVD-CWE-noinfo
CVE-2020-24585 2024-11-21 14:15 2020-08-21 Show GitHub Exploit DB Packet Storm
208386 7.8 HIGH
Local 		gog galaxy The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation from any authenticated user to SYSTEM by instructing the Wind… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-24574 2024-11-21 14:15 2020-08-21 Show GitHub Exploit DB Packet Storm
208387 7.5 HIGH
Network 		nexusdb nexusdb NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal. CWE-22
Path Traversal 		CVE-2020-24571 2024-11-21 14:15 2020-08-21 Show GitHub Exploit DB Packet Storm
208388 7.8 HIGH
Local 		voidtools everything voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged u… NVD-CWE-noinfo
CVE-2020-24567 2024-11-21 14:15 2020-08-21 Show GitHub Exploit DB Packet Storm
208389 8.8 HIGH
Local 		qemu
debian 		qemu
debian_linux 		An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug a… NVD-CWE-noinfo
CVE-2020-24165 2024-11-21 14:14 2023-08-29 Show GitHub Exploit DB Packet Storm
208390 5.5 MEDIUM
Local 		miniupnp_project ngiflib An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via crafted .gif file (infinite loop). CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-24221 2024-11-21 14:14 2023-08-11 Show GitHub Exploit DB Packet Storm