Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228451 7.5 危険 resalecode - Request It の addlink.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4691 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228452 4.3 警告 YourFreeWorld.com - YourFreeWorld Programs Rating Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4690 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228453 7.5 危険 resalecode - PHP Shopping Cart Selling Website Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4689 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228454 4.3 警告 resalecode - PHP Shopping Cart Selling Website Script の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4688 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228455 4.3 警告 phplemon - phplemon AdQuick の account.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4686 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228456 4.3 警告 phpscriptsnow - PHP Scripts Now Astrology の celebrities.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4685 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228457 7.5 危険 Scriptsez.net - Good/Bad Vote の vote.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4683 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228458 4.3 警告 Scriptsez.net - Good/Bad Vote の vote.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4682 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228459 4.3 警告 php directory source - phpDirectorySource の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4681 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228460 7.5 危険 php directory source - phpDirectorySource の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4680 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194531 8.8 HIGH
Network 		arubanetworks
siemens 		instant
scalance_w1750d_firmware 		A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 a… CWE-120
Classic Buffer Overflow 		CVE-2021-25144 2024-11-21 14:54 2021-03-30 Show GitHub Exploit DB Packet Storm
194532 7.5 HIGH
Network 		arubanetworks
siemens 		instant
scalance_w1750d_firmware 		A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 an… NVD-CWE-noinfo
CVE-2021-25143 2024-11-21 14:54 2021-03-30 Show GitHub Exploit DB Packet Storm
194533 6.7 MEDIUM
Local 		google android An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. CWE-787
 Out-of-bounds Write 		CVE-2021-25372 2024-11-21 14:54 2021-03-27 Show GitHub Exploit DB Packet Storm
194534 6.7 MEDIUM
Local 		google android A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. NVD-CWE-noinfo
CVE-2021-25371 2024-11-21 14:54 2021-03-27 Show GitHub Exploit DB Packet Storm
194535 4.4 MEDIUM
Local 		google android An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic. CWE-416
 Use After Free 		CVE-2021-25370 2024-11-21 14:54 2021-03-27 Show GitHub Exploit DB Packet Storm
194536 5.5 MEDIUM
Local 		google android An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. NVD-CWE-Other
CVE-2021-25369 2024-11-21 14:54 2021-03-27 Show GitHub Exploit DB Packet Storm
194537 7.5 HIGH
Network 		samsung cloud Hijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept when the provider is executed. CWE-287
Improper Authentication 		CVE-2021-25368 2024-11-21 14:54 2021-03-26 Show GitHub Exploit DB Packet Storm
194538 5.4 MEDIUM
Network 		samsung notes Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission. CWE-22
Path Traversal 		CVE-2021-25367 2024-11-21 14:54 2021-03-26 Show GitHub Exploit DB Packet Storm
194539 2.9 LOW
Physics 		samsung internet Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication. NVD-CWE-Other
CVE-2021-25366 2024-11-21 14:54 2021-03-26 Show GitHub Exploit DB Packet Storm
194540 7.8 HIGH
Local 		samsung notes Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent. CWE-276
Incorrect Default Permissions  		CVE-2021-25355 2024-11-21 14:54 2021-03-26 Show GitHub Exploit DB Packet Storm