Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228501 7.5 危険 script-shop24 - LM Starmail Paidmail の paidbanner.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4992 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228502 10 危険 SAP - SAP Business One の NT_Naming_Service.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4988 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228503 7.5 危険 scripteen - Scripteen Free Image Hosting Script の admin/header.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-4987 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228504 7.5 危険 websitesrus - Accessories Me PHP Affiliate Script の browse.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4985 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228505 4.3 警告 websitesrus - Accessories Me PHP Affiliate Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4984 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228506 4.3 警告 snowhall - Silurus Classifieds におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4983 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228507 5 警告 tufat - MyBackup の down.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4978 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228508 6.5 警告 tufat - MyBackup の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4977 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228509 7.5 危険 sweetphp - TotalCalendar の box_display.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4974 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228510 7.5 危険 sweetphp - TotalCalendar の rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4973 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194521 6.5 MEDIUM
Network 		ckeditor
oracle 		ckeditor
webcenter_sites
agile_plm
commerce_merchandising
jd_edwards_enterpriseone_tools
financial_services_model_management_and_governance
financial_services_analytical_application… 		It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plug… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2021-26272 2024-11-21 14:56 2021-01-27 Show GitHub Exploit DB Packet Storm
194522 6.5 MEDIUM
Network 		ckeditor
oracle 		ckeditor
webcenter_sites
agile_plm
jd_edwards_enterpriseone_tools
financial_services_analytical_applications_infrastructure
siebel_ui_framework
application_express 		It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs pl… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2021-26271 2024-11-21 14:56 2021-01-27 Show GitHub Exploit DB Packet Storm
194523 7.5 HIGH
Network 		cpanel cpanel cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579). NVD-CWE-noinfo
CVE-2021-26267 2024-11-21 14:56 2021-01-27 Show GitHub Exploit DB Packet Storm
194524 7.5 HIGH
Network 		cpanel cpanel cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578). NVD-CWE-Other
CVE-2021-26266 2024-11-21 14:56 2021-01-27 Show GitHub Exploit DB Packet Storm
194525 6.5 MEDIUM
Network 		intel openvino Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Toolkit may allow an authenticated user to potentially enable denial of service via network access. CWE-20
 Improper Input Validation  		CVE-2021-26251 2024-11-21 14:55 2022-11-12 Show GitHub Exploit DB Packet Storm
194526 6.3 MEDIUM
Network 		kubernetes kubernetes Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer controller does not … NVD-CWE-noinfo
CVE-2021-25736 2024-11-21 14:55 2023-10-30 Show GitHub Exploit DB Packet Storm
194527 7.2 HIGH
Network 		supermicro-cms_project supermicro-cms An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font_type parameter to setup.php. NVD-CWE-noinfo
CVE-2021-25857 2024-11-21 14:55 2023-08-11 Show GitHub Exploit DB Packet Storm
194528 4.9 MEDIUM
Network 		supermicro-cms_project supermicro-cms An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php. NVD-CWE-noinfo
CVE-2021-25856 2024-11-21 14:55 2023-08-11 Show GitHub Exploit DB Packet Storm
194529 5.3 MEDIUM
Local 		qpdf_project qpdf An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write parameter in libqpdf. CWE-416
 Use After Free 		CVE-2021-25786 2024-11-21 14:55 2023-08-11 Show GitHub Exploit DB Packet Storm
194530 6.1 MEDIUM
Network 		emby emby Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to /web. CWE-79
Cross-site Scripting 		CVE-2021-25828 2024-11-21 14:55 2023-06-29 Show GitHub Exploit DB Packet Storm