Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228541	4.3	警告	texmedia	-	texmedia Million Pixel Script の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4381	2012-12-20 19:28	2009-12-22	Show	GitHub Exploit DB Packet Storm

228542	7.5	危険	Wafer	-	Valarsoft Webmatic における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4380	2012-12-20 19:28	2009-12-14	Show	GitHub Exploit DB Packet Storm

228543	4.3	警告	Wafer	-	Valarsoft Webmatic におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4379	2012-12-20 19:28	2009-12-14	Show	GitHub Exploit DB Packet Storm

228544	4.3	警告	Wireshark	-	Windows 上で稼動している Wireshark の IPMI 解析子におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4378	2012-12-20 19:28	2009-12-17	Show	GitHub Exploit DB Packet Storm

228545	9.3	危険	Wireshark	-	Wireshark の Daintree SNA ファイルパーサーにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4376	2012-12-20 19:28	2009-12-4	Show	GitHub Exploit DB Packet Storm

228546	6.8	警告	Sitecore	-	Sitecore Staging Module の Staging Webservice における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-4367	2012-12-20 19:28	2009-12-21	Show	GitHub Exploit DB Packet Storm

228547	4.3	警告	Scriptsez.net	-	ScriptsEz Ez Blog の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4366	2012-12-20 19:28	2009-12-21	Show	GitHub Exploit DB Packet Storm

228548	4.3	警告	Scriptsez.net	-	ScriptsEz Ez Blog の admin.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4365	2012-12-20 19:28	2009-12-21	Show	GitHub Exploit DB Packet Storm

228549	4.3	警告	Scriptsez.net	-	ScriptsEz Ez Blog の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4364	2012-12-20 19:28	2009-12-21	Show	GitHub Exploit DB Packet Storm

228550	6.8	警告	wscreator	-	WSCreator の ADMIN/loginaction.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4351	2012-12-20 19:28	2009-12-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194651	4.0	MEDIUM Local	google	android	Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.	NVD-CWE-Other	CVE-2021-25390	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194652	6.1	MEDIUM Physics	google	android	Improper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use locked app without authentication.	CWE-287 Improper Authentication	CVE-2021-25389	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194653	7.1	HIGH Local	google	android	Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.	CWE-354 Improper Validation of Integrity Check Value	CVE-2021-25388	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194654	10.0	CRITICAL Network	google	android	An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-25387	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194655	9.8	CRITICAL Network	google	android	An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor proces…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-25386	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194656	9.8	CRITICAL Network	google	android	An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor proces…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-25385	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194657	9.8	CRITICAL Network	google	android	An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code o…	CWE-787 Out-of-bounds Write	CVE-2021-25384	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194658	9.8	CRITICAL Network	google	android	An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-25383	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194659	7.8	HIGH Local	python-hyperkitty_project	python-hyperkitty	A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local attackers to escalate privileges from the user hyperkitty or hyperkitty-admin t…	NVD-CWE-Other	CVE-2021-25322	2024-11-21 14:54	2021-06-10	Show	GitHub Exploit DB Packet Storm

194660	9.1	CRITICAL Network	python fedoraproject	pillow fedora	An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.	CWE-125 Out-of-bounds Read	CVE-2021-25288	2024-11-21 14:54	2021-06-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed