Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228541 4.3 警告 texmedia - texmedia Million Pixel Script の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4381 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
228542 7.5 危険 Wafer - Valarsoft Webmatic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4380 2012-12-20 19:28 2009-12-14 Show GitHub Exploit DB Packet Storm
228543 4.3 警告 Wafer - Valarsoft Webmatic におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4379 2012-12-20 19:28 2009-12-14 Show GitHub Exploit DB Packet Storm
228544 4.3 警告 Wireshark - Windows 上で稼動している Wireshark の IPMI 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4378 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228545 9.3 危険 Wireshark - Wireshark の Daintree SNA ファイルパーサーにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4376 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
228546 6.8 警告 Sitecore - Sitecore Staging Module の Staging Webservice における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-4367 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228547 4.3 警告 Scriptsez.net - ScriptsEz Ez Blog の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4366 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228548 4.3 警告 Scriptsez.net - ScriptsEz Ez Blog の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4365 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228549 4.3 警告 Scriptsez.net - ScriptsEz Ez Blog の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4364 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228550 6.8 警告 wscreator - WSCreator の ADMIN/loginaction.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4351 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194661 9.1 CRITICAL
Network 		python
fedoraproject 		pillow
fedora 		An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la. CWE-125
Out-of-bounds Read 		CVE-2021-25287 2024-11-21 14:54 2021-06-3 Show GitHub Exploit DB Packet Storm
194662 7.4 HIGH
Adjacent 		isc
fedoraproject
debian
siemens
netapp 		dhcp
fedora
debian_linux
ruggedcom_rox_rx1400_firmware
ruggedcom_rox_rx1500_firmware
ruggedcom_rox_rx1501_firmware
ruggedcom_rox_rx1510_firmware
ruggedcom_rox_rx1511_firmware
… 		In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2021-25217 2024-11-21 14:54 2021-05-27 Show GitHub Exploit DB Packet Storm
194663 6.7 MEDIUM
Local 		sophos home
intercept_x 		In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges. NVD-CWE-noinfo
CVE-2021-25264 2024-11-21 14:54 2021-05-18 Show GitHub Exploit DB Packet Storm
194664 7.8 HIGH
Local 		opensuse factory A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Facto… - CVE-2021-25319 2024-11-21 14:54 2021-05-5 Show GitHub Exploit DB Packet Storm
194665 3.3 LOW
Local 		suse
fedoraproject 		cups
fedora 		A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factor… - CVE-2021-25317 2024-11-21 14:54 2021-05-5 Show GitHub Exploit DB Packet Storm
194666 6.1 MEDIUM
Network 		solarwinds serv-u_file_server SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header. CWE-79
Cross-site Scripting 		CVE-2021-25179 2024-11-21 14:54 2021-05-5 Show GitHub Exploit DB Packet Storm
194667 8.8 HIGH
Network 		arubanetworks airwave A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address th… CWE-78
OS Command  		CVE-2021-25167 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm
194668 8.8 HIGH
Network 		arubanetworks airwave A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address th… CWE-78
OS Command  		CVE-2021-25166 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm
194669 8.1 HIGH
Network 		arubanetworks airwave A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address th… CWE-611
XXE 		CVE-2021-25163 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm
194670 9.8 CRITICAL
Network 		debian
isc
siemens
netapp 		debian_linux
bind
sinec_infrastructure_network_services
cloud_backup
active_iq_unified_manager
aff_a250_firmware
aff_500f_firmware
h300s_firmware
h500s_firmware
h700s_firmw… 		In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of t… CWE-125
Out-of-bounds Read 		CVE-2021-25216 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm