Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228481	7.5	危険	php-paid4mail	-	PHP Paid 4 Mail Script の paidbanner.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2774	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

228482	7.5	危険	shop-020	-	PHP Paid 4 Mail Script の home.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-2773	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

228483	4.3	警告	realtysoft	-	PG Roommate Finder Solution におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2772	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

228484	7.5	危険	powerupload	-	PowerUpload における管理者アクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2770	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

228485	6.8	警告	ultrize	-	Ultrize TimeSheet の include/timesheet.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-2769	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

228486	7.5	危険	WordPress.org	-	WordPress の wp-login.php におけるデータベースの最初のユーザパスワードを強制的にリセットされる脆弱性	CWE-255 証明書・パスワード管理	CVE-2009-2762	2012-12-20 19:10	2009-08-12	Show	GitHub Exploit DB Packet Storm

228487	5.5	警告	Roundup	-	Roundup の cgi/actions.py におけるクラス内の任意の項目を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2737	2012-12-20 19:10	2009-08-11	Show	GitHub Exploit DB Packet Storm

228488	6.5	警告	sun-jester	-	sun-jester OpenNews の admin.php における任意の PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2736	2012-12-20 19:10	2009-08-11	Show	GitHub Exploit DB Packet Storm

228489	6.8	警告	sun-jester	-	sun-jester OpenNews の admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2735	2012-12-20 19:10	2009-08-11	Show	GitHub Exploit DB Packet Storm

228490	5	警告	サン・マイクロシステムズ	-	Sun Java SE の Swing 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2720	2012-12-20 19:10	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208151	7.5	HIGH Network	stampit	supermixer	Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-24939	2024-11-21 14:16	2021-06-17	Show	GitHub Exploit DB Packet Storm

208152	7.5	HIGH Network	pharmacy_medical_store_and_sale_point_project	pharmacy_medical_store_and_sale_point	The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to r…	CWE-89 SQL Injection	CVE-2020-24862	2024-11-21 14:16	2021-06-3	Show	GitHub Exploit DB Packet Storm

208153	8.8	HIGH Network	libraw	libraw	Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.	CWE-787 Out-of-bounds Write	CVE-2020-24870	2024-11-21 14:16	2021-06-3	Show	GitHub Exploit DB Packet Storm

208154	4.3	MEDIUM Network	pluck-cms	pluck	An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=editpage	CWE-352 Origin Validation Error	CVE-2020-24740	2024-11-21 14:16	2021-05-19	Show	GitHub Exploit DB Packet Storm

208155	7.8	HIGH Local	ui	unifi_video	In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modification of the library to execute code o…	CWE-427 Uncontrolled Search Path Element	CVE-2020-24755	2024-11-21 14:16	2021-05-18	Show	GitHub Exploit DB Packet Storm

208156	5.4	MEDIUM Network	cmswing	cmswing	There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visitors access the article module.	CWE-79 Cross-site Scripting	CVE-2020-24993	2024-11-21 14:16	2021-05-18	Show	GitHub Exploit DB Packet Storm

208157	5.4	MEDIUM Network	cmswing	cmswing	There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses the content management module.	CWE-79 Cross-site Scripting	CVE-2020-24992	2024-11-21 14:16	2021-05-18	Show	GitHub Exploit DB Packet Storm

208158	9.8	CRITICAL Network	ambarella	oryx_rtsp_server	A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to exec…	CWE-120 Classic Buffer Overflow	CVE-2020-24918	2024-11-21 14:16	2021-04-30	Show	GitHub Exploit DB Packet Storm

208159	7.8	HIGH Local	ffmpeg	ffmpeg	Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local).	CWE-120 Classic Buffer Overflow	CVE-2020-24995	2024-11-21 14:16	2021-03-31	Show	GitHub Exploit DB Packet Storm

208160	8.8	HIGH Network	libass_project	libass	Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-24994	2024-11-21 14:16	2021-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed