Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228581	4.3	警告	sensesites	-	CommonSense CMS の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4736	2012-12-20 19:28	2010-03-23	Show	GitHub Exploit DB Packet Storm

228582	6.8	警告	supercrackmunkey	-	SimpleLoginSys の checkuser.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4733	2012-12-20 19:28	2010-03-18	Show	GitHub Exploit DB Packet Storm

228583	6.8	警告	technotoad	-	TT Web Site Manager の tt/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4732	2012-12-20 19:28	2010-03-18	Show	GitHub Exploit DB Packet Storm

228584	7.5	危険	x10media	-	x10 Adult Media Script の report.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4730	2012-12-20 19:28	2010-03-18	Show	GitHub Exploit DB Packet Storm

228585	4.3	警告	x10media	-	x10 Adult Media Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4729	2012-12-20 19:28	2010-03-18	Show	GitHub Exploit DB Packet Storm

228586	7.5	危険	questions answered	-	Questions Answered の管理インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4728	2012-12-20 19:28	2010-03-18	Show	GitHub Exploit DB Packet Storm

228587	4.3	警告	phpscriptsnow	-	Real Time Currency Exchange の rates.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4715	2012-12-20 19:28	2010-03-15	Show	GitHub Exploit DB Packet Storm

228588	7.5	危険	tukanas	-	Tukanas Classifieds Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4712	2012-12-20 19:28	2010-03-15	Show	GitHub Exploit DB Packet Storm

228589	4.3	警告	Pligg	-	Pligg におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2009-4788	2012-12-20 19:28	2009-11-30	Show	GitHub Exploit DB Packet Storm

228590	6.8	警告	Pligg	-	Pligg におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4787	2012-12-20 19:28	2009-11-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194651	4.0	MEDIUM Local	google	android	Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.	NVD-CWE-Other	CVE-2021-25390	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194652	6.1	MEDIUM Physics	google	android	Improper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use locked app without authentication.	CWE-287 Improper Authentication	CVE-2021-25389	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194653	7.1	HIGH Local	google	android	Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.	CWE-354 Improper Validation of Integrity Check Value	CVE-2021-25388	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194654	10.0	CRITICAL Network	google	android	An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-25387	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194655	9.8	CRITICAL Network	google	android	An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor proces…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-25386	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194656	9.8	CRITICAL Network	google	android	An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor proces…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-25385	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194657	9.8	CRITICAL Network	google	android	An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code o…	CWE-787 Out-of-bounds Write	CVE-2021-25384	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194658	9.8	CRITICAL Network	google	android	An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-25383	2024-11-21 14:54	2021-06-12	Show	GitHub Exploit DB Packet Storm

194659	7.8	HIGH Local	python-hyperkitty_project	python-hyperkitty	A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local attackers to escalate privileges from the user hyperkitty or hyperkitty-admin t…	NVD-CWE-Other	CVE-2021-25322	2024-11-21 14:54	2021-06-10	Show	GitHub Exploit DB Packet Storm

194660	9.1	CRITICAL Network	python fedoraproject	pillow fedora	An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.	CWE-125 Out-of-bounds Read	CVE-2021-25288	2024-11-21 14:54	2021-06-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed