Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228411 7.8 危険 UMN - MapServer の mapser における任意のファイルの存在を特定される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0843 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
228412 4.3 警告 UMN - MapServer の mapserv における任意の無効な .map ファイルを読み取られる脆弱性 CWE-200
情報漏えい 		CVE-2009-0842 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
228413 10 危険 UMN - MapServer の mapserv におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0841 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
228414 10 危険 UMN - MapServer の mapserv におけるヒープベースのバッファアンダーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0840 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
228415 10 危険 UMN - MapServer の mapserv におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0839 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
228416 6 警告 PHP-Fusion - PHP-Fusion 用の Members CV モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0831 2012-12-20 19:10 2009-03-5 Show GitHub Exploit DB Packet Storm
228417 7.5 危険 torben sorensen - TinX/cms の system/rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0825 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
228418 4.9 警告 slysoft - SlySoft AnyDVD などに同梱されている Elaborate Bytes ElbyCDIO.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-0824 2012-12-20 19:10 2009-03-14 Show GitHub Exploit DB Packet Storm
228419 4.3 警告 TYPO3 Association - TYPO3 の backend ユーザインタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0816 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
228420 5 警告 TYPO3 Association - TYPO3 の class.tslib_fe.php における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2009-0815 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225491 9.8 CRITICAL
Network 		py-lmdb_project py-lmdb An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation. NOTE: this outcome occurs w… CWE-787
 Out-of-bounds Write 		CVE-2019-16225 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
225492 9.8 CRITICAL
Network 		py-lmdb_project py-lmdb An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs w… CWE-787
 Out-of-bounds Write 		CVE-2019-16224 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
225493 5.4 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows XSS in post previews by authenticated users. CWE-79
Cross-site Scripting 		CVE-2019-16223 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
225494 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks. CWE-79
Cross-site Scripting 		CVE-2019-16222 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
225495 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows reflected XSS in the dashboard. CWE-79
Cross-site Scripting 		CVE-2019-16221 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
225496 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forwar… CWE-601
Open Redirect 		CVE-2019-16220 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
225497 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows XSS in shortcode previews. CWE-79
Cross-site Scripting 		CVE-2019-16219 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
225498 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows XSS in stored comments. CWE-79
Cross-site Scripting 		CVE-2019-16218 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
225499 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled. CWE-79
Cross-site Scripting 		CVE-2019-16217 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
225500 5.4 MEDIUM
Network 		esri arcgis_enterprise In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature. CWE-79
Cross-site Scripting 		CVE-2019-16193 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm