Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228121 6.8 警告 technotoad - TT Web Site Manager の tt/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4732 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
228122 7.5 危険 x10media - x10 Adult Media Script の report.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4730 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
228123 4.3 警告 x10media - x10 Adult Media Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4729 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
228124 7.5 危険 questions answered - Questions Answered の管理インターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4728 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
228125 4.3 警告 phpscriptsnow - Real Time Currency Exchange の rates.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4715 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
228126 7.5 危険 tukanas - Tukanas Classifieds Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4712 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
228127 4.3 警告 Pligg - Pligg におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2009-4788 2012-12-20 19:28 2009-11-30 Show GitHub Exploit DB Packet Storm
228128 6.8 警告 Pligg - Pligg におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4787 2012-12-20 19:28 2009-11-30 Show GitHub Exploit DB Packet Storm
228129 4.3 警告 Pligg - Pligg におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4786 2012-12-20 19:28 2009-11-30 Show GitHub Exploit DB Packet Storm
228130 4.3 警告 phpMyFAQ - phpMyFAQ の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4780 2012-12-20 19:28 2009-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
207971 4.7 MEDIUM
Local
linux
fedoraproject
debian
linux_kernel
fedora
debian_linux
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condit… CWE-362
CWE-476
CWE-416
Race Condition
 NULL Pointer Dereference
 Use After Free
CVE-2020-27675 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
207972 5.3 MEDIUM
Local
xen
fedoraproject
debian
xen
fedora
debian_linux
An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during … CWE-787
 Out-of-bounds Write
CVE-2020-27674 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
207973 5.5 MEDIUM
Local
linux
debian
opensuse
xen
linux_kernel
debian_linux
leap
xen
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e995… NVD-CWE-noinfo
CVE-2020-27673 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
207974 7.0 HIGH
Local
xen
fedoraproject
opensuse
debian
xen
fedora
leap
debian_linux
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition tha… CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2020-27672 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
207975 7.8 HIGH
Local
xen
opensuse
debian
fedoraproject
xen
leap
debian_linux
fedora
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing… NVD-CWE-noinfo
CVE-2020-27671 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
207976 7.8 HIGH
Local
xen
opensuse
fedoraproject
debian
xen
leap
fedora
debian_linux
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-tabl… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2020-27670 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
207977 5.4 MEDIUM
Network
strapi strapi Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature. CWE-79
Cross-site Scripting
CVE-2020-27666 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
207978 7.5 HIGH
Network
strapi strapi In Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB (aka content-type-builder) routes. CWE-276
Incorrect Default Permissions 
CVE-2020-27665 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
207979 9.8 CRITICAL
Network
strapi strapi admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality. NVD-CWE-noinfo
CVE-2020-27664 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
207980 5.4 MEDIUM
Network
dedecms dedecms A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web p… CWE-79
Cross-site Scripting
CVE-2020-27533 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm