Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228541 7.5 危険 Wafer - Valarsoft Webmatic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4380 2012-12-20 19:28 2009-12-14 Show GitHub Exploit DB Packet Storm
228542 4.3 警告 Wafer - Valarsoft Webmatic におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4379 2012-12-20 19:28 2009-12-14 Show GitHub Exploit DB Packet Storm
228543 4.3 警告 Wireshark - Windows 上で稼動している Wireshark の IPMI 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4378 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228544 9.3 危険 Wireshark - Wireshark の Daintree SNA ファイルパーサーにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4376 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
228545 6.8 警告 Sitecore - Sitecore Staging Module の Staging Webservice における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-4367 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228546 4.3 警告 Scriptsez.net - ScriptsEz Ez Blog の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4366 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228547 4.3 警告 Scriptsez.net - ScriptsEz Ez Blog の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4365 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228548 4.3 警告 Scriptsez.net - ScriptsEz Ez Blog の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4364 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228549 6.8 警告 wscreator - WSCreator の ADMIN/loginaction.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4351 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228550 6.8 警告 PHP Web Scripts - Link Up Gold の administration/administrators.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4349 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
207891 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rda_interpret uses a privileged pipe that lacks a close-on-exec flag. NVD-CWE-Other
CVE-2020-28012 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207892 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause privilege escalation from exim to root. CWE-787
 Out-of-bounds Write 		CVE-2020-28011 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207893 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small (on some common platforms). CWE-787
 Out-of-bounds Write 		CVE-2020-28010 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207894 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation … CWE-190
 Integer Overflow or Wraparound 		CVE-2020-28009 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207895 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input s… CWE-269
 Improper Privilege Management 		CVE-2020-28008 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207896 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (owned by a non-root user), a symlink or hard link attack allows overwriting crit… CWE-59
Link Following 		CVE-2020-28007 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207897 5.4 MEDIUM
Network 		online_discussion_forum_project online_discussion_forum The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript t… CWE-79
Cross-site Scripting 		CVE-2020-28141 2024-11-21 14:22 2021-04-20 Show GitHub Exploit DB Packet Storm
207898 8.1 HIGH
Network 		cosori cs158-af_firmware A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to code execution. An attacker… NVD-CWE-Other
CVE-2020-28593 2024-11-21 14:22 2021-04-15 Show GitHub Exploit DB Packet Storm
207899 9.8 CRITICAL
Network 		cosori cs158-af_firmware A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to remote … CWE-787
 Out-of-bounds Write 		CVE-2020-28592 2024-11-21 14:22 2021-04-15 Show GitHub Exploit DB Packet Storm
207900 5.4 MEDIUM
Network 		lavalite lavalite Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field. CWE-79
Cross-site Scripting 		CVE-2020-28124 2024-11-21 14:22 2021-04-15 Show GitHub Exploit DB Packet Storm