Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228501	4	警告	Vtiger	-	vtiger CRM の include/utils/ListViewUtils.php における制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3251	2012-12-20 19:28	2007-10-4	Show	GitHub Exploit DB Packet Storm

228502	7.5	危険	php-shop-system	-	Joomla! 用の IXXO Cart コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3215	2012-12-20 19:28	2009-09-16	Show	GitHub Exploit DB Packet Storm

228503	7.5	危険	raizlabs	-	PHP eMail Manager の remove.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3209	2012-12-20 19:28	2009-09-16	Show	GitHub Exploit DB Packet Storm

228504	7.5	危険	prakashatma mishra	-	phpfreeBB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3208	2012-12-20 19:28	2009-09-16	Show	GitHub Exploit DB Packet Storm

228505	4.3	警告	stivaforum	-	Stiva Forum におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3204	2012-12-20 19:28	2009-09-16	Show	GitHub Exploit DB Packet Storm

228506	4.3	警告	uloki	-	ULoKI PHP Forum の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3202	2012-12-20 19:28	2009-09-16	Show	GitHub Exploit DB Packet Storm

228507	4.3	警告	rob schultz	-	Media Player Classic における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3201	2012-12-20 19:28	2009-09-15	Show	GitHub Exploit DB Packet Storm

228508	5.9	警告	QNAP Systems	-	QNAP TS-239 Pro などにおけるパスフレーズ入力を回避される脆弱性	CWE-310 暗号の問題	CVE-2009-3200	2012-12-20 19:28	2009-09-21	Show	GitHub Exploit DB Packet Storm

228509	5	警告	uebimiau	-	Uebimiau Webmail におけるデータベースをダウンロードされる脆弱性	CWE-200 情報漏えい	CVE-2009-3199	2012-12-20 19:28	2009-09-15	Show	GitHub Exploit DB Packet Storm

228510	7.5	危険	uwix	-	Joomla! 用の digifolio コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3193	2012-12-20 19:28	2009-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194921	9.8	CRITICAL Network	htmldoc_project	htmldoc	A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary code and denial of service.	CWE-787 Out-of-bounds Write	CVE-2021-23165	2024-11-21 14:51	2022-03-17	Show	GitHub Exploit DB Packet Storm

194922	9.8	CRITICAL Network	htmldoc_project	htmldoc	A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of s…	CWE-415 Double Free	CVE-2021-23158	2024-11-21 14:51	2022-03-17	Show	GitHub Exploit DB Packet Storm

194923	7.5	HIGH Network	oppo	coloros	In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.	NVD-CWE-noinfo	CVE-2021-23246	2024-11-21 14:51	2022-03-12	Show	GitHub Exploit DB Packet Storm

194924	8.1	HIGH Network	postgresql fedoraproject redhat	postgresql fedora software_collections enterprise_linux enterprise_linux_for_power_little_endian enterprise_linux_for_ibm_z_systems	When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection …	-	CVE-2021-23214	2024-11-21 14:51	2022-03-5	Show	GitHub Exploit DB Packet Storm

194925	5.9	MEDIUM Network	postgresql	postgresql	A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.	-	CVE-2021-23222	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

194926	7.8	HIGH Local	htmldoc_project	htmldoc	A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to execute arbitrary code and denial of service.	CWE-787 Out-of-bounds Write	CVE-2021-23206	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

194927	7.5	HIGH Network	samba	samba	A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their …	NVD-CWE-noinfo	CVE-2021-23192	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

194928	7.8	HIGH Local	htmldoc_project	htmldoc	A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of service.	CWE-476 NULL Pointer Dereference	CVE-2021-23191	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

194929	7.8	HIGH Local	htmldoc_project	htmldoc	A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary code and denial of service.	CWE-476 NULL Pointer Dereference	CVE-2021-23180	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

194930	6.1	MEDIUM Network	karma_project	karma	The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.	CWE-601 Open Redirect	CVE-2021-23495	2024-11-21 14:51	2022-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed