Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228311	5	警告	telepark	-	telepark.wiki における認可を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-4089	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

228312	6.8	警告	telepark	-	telepark.wiki におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4088	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

228313	4.3	警告	telepark	-	telepark.wiki の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4087	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

228314	4.3	警告	puntolatinoclub	-	Drupal 用の Gallery Assist モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4064	2012-12-20 19:28	2009-11-18	Show	GitHub Exploit DB Packet Storm

228315	4.3	警告	yuriy babenko	-	Drupal 用の Agreement モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4061	2012-12-20 19:28	2009-11-18	Show	GitHub Exploit DB Packet Storm

228316	7.5	危険	telebidauctionscript	-	Telebid Auction Script の allauctions.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4058	2012-12-20 19:28	2009-11-23	Show	GitHub Exploit DB Packet Storm

228317	7.5	危険	PowerDNS	-	PowerDNS Recursor における DNS データを偽装される脆弱性	CWE-noinfo 情報不足	CVE-2009-4010	2012-12-20 19:28	2010-01-6	Show	GitHub Exploit DB Packet Storm

228318	10	危険	PowerDNS	-	PowerDNS Recursor におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4009	2012-12-20 19:28	2010-01-6	Show	GitHub Exploit DB Packet Storm

228319	9.3	危険	XnSoft	-	XnView における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-4001	2012-12-20 19:28	2010-03-15	Show	GitHub Exploit DB Packet Storm

228320	5	警告	phpMyBackupPro	-	phpMyBackupPro の get_file.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4050	2012-12-20 19:28	2009-11-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220551	7.5	HIGH Network	gitlab	gitlab	An authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that prevented owners and maintainer to delete epic comments.	NVD-CWE-Other CWE-269 Improper Privilege Management	CVE-2019-5472	2024-11-21 13:45	2020-01-28	Show	GitHub Exploit DB Packet Storm

220552	6.1	MEDIUM Network	f-revocrm	f-revocrm	Cross-site scripting vulnerability in F-RevoCRM 6.0 to F-RevoCRM 6.5 patch6 (version 6 series) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2019-6036	2024-11-21 13:45	2020-01-27	Show	GitHub Exploit DB Packet Storm

220553	5.5	MEDIUM Local	fortinet	fortios	Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the k…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-5593	2024-11-21 13:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

220554	7.1	HIGH Local	rapid7	appspider	The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after a restart of the Chrome browser. This behavior could make future session hijack…	CWE-613 Insufficient Session Expiration	CVE-2019-5647	2024-11-21 13:45	2020-01-23	Show	GitHub Exploit DB Packet Storm

220555	7.5	HIGH Network	anglers-net	cgi_an-anlyzer	Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password via HTTP referer.	CWE-522 Insufficiently Protected Credentials	CVE-2019-5990	2024-11-21 13:45	2020-01-6	Show	GitHub Exploit DB Packet Storm

220556	6.1	MEDIUM Network	anglers-net	cgi_an-anlyzer	DOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Analysis Ob…	CWE-79 Cross-site Scripting	CVE-2019-5989	2024-11-21 13:45	2020-01-6	Show	GitHub Exploit DB Packet Storm

220557	6.1	MEDIUM Network	anglers-net	cgi_an-anlyzer	Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Pag…	CWE-79 Cross-site Scripting	CVE-2019-5988	2024-11-21 13:45	2020-01-6	Show	GitHub Exploit DB Packet Storm

220558	8.8	HIGH Network	anglers-net	cgi_an-anlyzer	Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page.	CWE-78 OS Command	CVE-2019-5987	2024-11-21 13:45	2020-01-6	Show	GitHub Exploit DB Packet Storm

220559	6.5	MEDIUM Network	google opensuse	chrome leap backports_sle	Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CWE-787 Out-of-bounds Write	CVE-2019-5846	2024-11-21 13:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

220560	6.5	MEDIUM Network	google opensuse	chrome leap backports_sle	Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CWE-787 Out-of-bounds Write	CVE-2019-5845	2024-11-21 13:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed