Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228051 7.5 危険 sahana - Sahana の www/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3625 2012-12-20 19:28 2009-06-25 Show GitHub Exploit DB Packet Storm
228052 4.3 警告 WordPress.org - WordPress の wp-trackback.php におけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題 		CVE-2009-3622 2012-12-20 19:28 2009-10-20 Show GitHub Exploit DB Packet Storm
228053 5 警告 ViewVC - ViewVC における脆弱性 CWE-noinfo
情報不足 		CVE-2009-3619 2012-12-20 19:28 2009-08-11 Show GitHub Exploit DB Packet Storm
228054 4.3 警告 ViewVC - ViewVC の viewvc.py におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3618 2012-12-20 19:28 2009-08-11 Show GitHub Exploit DB Packet Storm
228055 7.6 危険 tatsuhiro tsujikawa - aria の src/AbstractCommand.cc におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2009-3617 2012-12-20 19:28 2009-10-20 Show GitHub Exploit DB Packet Storm
228056 8.5 危険 Fabrice Bellard - QEMU の VNC server におけるホストの OS 上で任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3616 2012-12-20 19:28 2009-10-23 Show GitHub Exploit DB Packet Storm
228057 9.3 危険 freedesktop.org - Poppler の glib/poppler-page.cc における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3607 2012-12-20 19:28 2009-10-21 Show GitHub Exploit DB Packet Storm
228058 4.3 警告 Scriptsez.net - Scriptsez Ultimate Poll の demo_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3601 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
228059 7.5 危険 vspanel - VS PANEL の results.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3595 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
228060 4.3 警告 qtmsoft - Qualiteam X-Cart の customer/home.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3592 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208511 7.5 HIGH
Network 		openssl
debian
freebsd
fedoraproject
oracle
netapp
broadcom
opensuse
jdedwards
tenable 		openssl
debian_linux
freebsd
fedora
peoplesoft_enterprise_peopletools
jd_edwards_world_security
enterprise_manager_ops_center
mysql
enterprise_manager_base_platform
mysql_e… 		Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signat… CWE-476
 NULL Pointer Dereference 		CVE-2020-1967 2024-11-21 14:11 2020-04-21 Show GitHub Exploit DB Packet Storm
208512 5.3 MEDIUM
Adjacent 		huawei honor_v20_firmware Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3P3),versions earlier than 10.0.0.180(C432E10R3P4) have an information disclosur… CWE-287
Improper Authentication 		CVE-2020-1803 2024-11-21 14:11 2020-04-21 Show GitHub Exploit DB Packet Storm
208513 7.0 HIGH
Local 		gnu
redhat
canonical 		glibc
enterprise_linux
ubuntu_linux 		An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when stor… CWE-787
 Out-of-bounds Write 		CVE-2020-1751 2024-11-21 14:11 2020-04-18 Show GitHub Exploit DB Packet Storm
208514 9.8 CRITICAL
Network 		apache heron It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not configure its YAML parser to prevent the instantiation of arbitrary types, resu… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-1964 2024-11-21 14:11 2020-04-17 Show GitHub Exploit DB Packet Storm
208515 8.6 HIGH
Network 		juniper junos
junos_os_evolved 		In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-1632 2024-11-21 14:11 2020-04-16 Show GitHub Exploit DB Packet Storm
208516 5.3 MEDIUM
Network 		libssh
canonical
netapp
redhat
fedoraproject
oracle 		libssh
ubuntu_linux
cloud_backup
enterprise_linux
fedora
mysql_workbench 		A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been f… CWE-476
 NULL Pointer Dereference 		CVE-2020-1730 2024-11-21 14:11 2020-04-14 Show GitHub Exploit DB Packet Storm
208517 5.5 MEDIUM
Local 		huawei mate_30_pro_firmware
mate_30_firmware 		There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, succ… CWE-287
Improper Authentication 		CVE-2020-1801 2024-11-21 14:11 2020-04-11 Show GitHub Exploit DB Packet Storm
208518 7.8 HIGH
Local 		facebook instagram A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128. CWE-190
 Integer Overflow or Wraparound 		CVE-2020-1895 2024-11-21 14:11 2020-04-10 Show GitHub Exploit DB Packet Storm
208519 7.8 HIGH
Local 		oculus desktop Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges… CWE-59
Link Following 		CVE-2020-1885 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm
208520 5.5 MEDIUM
Local 		juniper junos_os_evolved A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-1624 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm