Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228321 6.8 警告 phpbbbook - PHPbbBook の bbcode.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0442 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
228322 6.8 警告 technote - Technote の skin_shop/standard/2_view_body/body_default.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0441 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
228323 7.5 危険 Tincan - phpList の lists/admin.php におけるローカルファイルをインクルードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0422 2012-12-20 19:10 2009-02-4 Show GitHub Exploit DB Packet Storm
228324 7.5 危険 rd-media - Joomla! 用の RD-Autos コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0420 2012-12-20 19:10 2009-02-4 Show GitHub Exploit DB Packet Storm
228325 6.9 警告 Standards Based Linux Instrumentation (SBLIM) - SBLIM sblim-sfcb の SSL certificate setup program における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-0416 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
228326 10 危険 The Tor Project - Tor における脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0414 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
228327 4.3 警告 Roundcube.net - roundcubemail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0413 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
228328 7.5 危険 smartsitecms - smartSite CMS の articles.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0405 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
228329 6.8 警告 socialengine - SocialEngine の blog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0400 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
228330 7.8 危険 sony ericsson - Sony Ericsson W910i などの電話機におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0396 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225341 7.5 HIGH
Network 		comba ac2400_firmware Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management server. The request doesn't require any aut… CWE-306
Missing Authentication for Critical Function 		CVE-2019-15654 2024-11-21 13:29 2020-03-20 Show GitHub Exploit DB Packet Storm
225342 7.5 HIGH
Network 		comba ap2600-i_-_a02_-_0202n00pd2_firmware Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication mechanism. The HTML source code of the login page contains values that allow obtaining th… CWE-327
CWE-311
CWE-522
 Use of a Broken or Risky Cryptographic Algorithm
Missing Encryption of Sensitive Data
 Insufficiently Protected Credentials 		CVE-2019-15653 2024-11-21 13:29 2020-03-20 Show GitHub Exploit DB Packet Storm
225343 8.1 HIGH
Network 		cisco sd-wan_firmware A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists … CWE-89
SQL Injection 		CVE-2019-16012 2024-11-21 13:29 2020-03-20 Show GitHub Exploit DB Packet Storm
225344 4.8 MEDIUM
Network 		cisco sd-wan_firmware A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based managem… CWE-79
Cross-site Scripting 		CVE-2019-16010 2024-11-21 13:29 2020-03-20 Show GitHub Exploit DB Packet Storm
225345 6.7 MEDIUM
Local 		fortinet fortiap-w2
fortiap-s
fortiap-u
fortiap 		A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administra… CWE-78
OS Command  		CVE-2019-15708 2024-11-21 13:29 2020-03-16 Show GitHub Exploit DB Packet Storm
225346 5.9 MEDIUM
Network 		yarnpkg yarn The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. Th… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2019-15608 2024-11-21 13:29 2020-03-16 Show GitHub Exploit DB Packet Storm
225347 9.8 CRITICAL
Network 		kill-port-process_project kill-port-process The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability. CWE-78
OS Command  		CVE-2019-15609 2024-11-21 13:29 2020-02-29 Show GitHub Exploit DB Packet Storm
225348 3.3 LOW
Local 		freebsd freebsd In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p6, due to incorrect… CWE-665
 Improper Initialization 		CVE-2019-15875 2024-11-21 13:29 2020-02-19 Show GitHub Exploit DB Packet Storm
225349 4.3 MEDIUM
Network 		gitlab gitlab GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint. NVD-CWE-noinfo
CVE-2019-15594 2024-11-21 13:29 2020-02-15 Show GitHub Exploit DB Packet Storm
225350 4.3 MEDIUM
Network 		gitlab gitlab GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline. NVD-CWE-noinfo
CVE-2019-15592 2024-11-21 13:29 2020-02-15 Show GitHub Exploit DB Packet Storm