Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228091 9.3 危険 sorcerersoftware - Sorcerer Software MultiMedia Jukebox におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2650 2012-12-20 19:10 2009-07-30 Show GitHub Exploit DB Packet Storm
228092 6.8 警告 rich white - School Data Navigator の app_and_readme/navigator/index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2641 2012-12-20 19:10 2009-07-28 Show GitHub Exploit DB Packet Storm
228093 7.5 危険 prosmdr - ProSMDR の login.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2612 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
228094 3.5 注意 scott courtney - Drupal 用の Links Package モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2610 2012-12-20 19:10 2009-06-25 Show GitHub Exploit DB Packet Storm
228095 7.5 危険 pinme - Joomla! 用の com_pinboard コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2607 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
228096 6.8 警告 traidnt - Traidnt Up の adminquery.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2605 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
228097 7.5 危険 zenhelpdesk - Zen Help Desk の adminlogin.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2604 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
228098 5 警告 r2newsletter - R2 Newsletter におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2602 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
228099 7.5 危険 radscripts - RadCLASSIFIEDS Gold の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2599 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
228100 7.8 危険 サン・マイクロシステムズ - Web Proxy Server 用の SJS Access Manager Policy Agent モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2597 2012-12-20 19:10 2009-07-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195261 6.7 MEDIUM
Local 		redhat ansible_tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside… - CVE-2021-20253 2024-11-21 14:46 2021-03-10 Show GitHub Exploit DB Packet Storm
195262 5.5 MEDIUM
Local 		imagemagick
debian 		imagemagick
debian_linux 		A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. … - CVE-2021-20243 2024-11-21 14:46 2021-03-10 Show GitHub Exploit DB Packet Storm
195263 5.5 MEDIUM
Local 		imagemagick
debian 		imagemagick
debian_linux 		A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The hig… - CVE-2021-20241 2024-11-21 14:46 2021-03-10 Show GitHub Exploit DB Packet Storm
195264 5.3 MEDIUM
Network 		ibm cloud_pak_for_multicloud_management_monitoring IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could lead to further attacks against the system. IBM X-Force ID: 194513. NVD-CWE-noinfo
CVE-2021-20341 2024-11-21 14:46 2021-03-10 Show GitHub Exploit DB Packet Storm
195265 7.5 HIGH
Network 		privoxy
debian 		privoxy
debian_linux 		A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of service. NVD-CWE-noinfo
CVE-2021-20276 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
195266 7.5 HIGH
Network 		privoxy
debian 		privoxy
debian_linux 		A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service. CWE-125
Out-of-bounds Read 		CVE-2021-20275 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
195267 7.5 HIGH
Network 		privoxy privoxy A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves. - CVE-2021-20274 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
195268 7.5 HIGH
Network 		privoxy
debian 		privoxy
debian_linux 		A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off. - CVE-2021-20273 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
195269 7.5 HIGH
Network 		privoxy
debian 		privoxy
debian_linux 		A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server crash. - CVE-2021-20272 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
195270 6.1 MEDIUM
Network 		movabletype movable_type_premium
movable_type_premium_advanced
movable_type_advanced
movable_type 		Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Adva… CWE-79
Cross-site Scripting 		CVE-2021-20665 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm