Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228581 7.5 危険 TYPO3 Association - TYPO3 用の Webesse E-Card エクステンションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4740 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
228582 6.8 警告 skadate - SkaDate Dating の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-4739 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
228583 4.3 警告 sensesites - CommonSense CMS の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4736 2012-12-20 19:28 2010-03-23 Show GitHub Exploit DB Packet Storm
228584 6.8 警告 supercrackmunkey - SimpleLoginSys の checkuser.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4733 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
228585 6.8 警告 technotoad - TT Web Site Manager の tt/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4732 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
228586 7.5 危険 x10media - x10 Adult Media Script の report.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4730 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
228587 4.3 警告 x10media - x10 Adult Media Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4729 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
228588 7.5 危険 questions answered - Questions Answered の管理インターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4728 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
228589 4.3 警告 phpscriptsnow - Real Time Currency Exchange の rates.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4715 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
228590 7.5 危険 tukanas - Tukanas Classifieds Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4712 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319011 6.7 MEDIUM
Local
google android In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not neede… CWE-787
 Out-of-bounds Write
CVE-2024-20087 2024-09-5 23:26 2024-09-2 Show GitHub Exploit DB Packet Storm
319012 6.7 MEDIUM
Local
google android In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not neede… CWE-787
 Out-of-bounds Write
CVE-2024-20086 2024-09-5 23:26 2024-09-2 Show GitHub Exploit DB Packet Storm
319013 7.5 HIGH
Network
abcd-community abcd A vulnerability classified as problematic was found in ABCD ABCD2 up to 2.2.0-beta-1. This vulnerability affects unknown code of the file /abcd/opac/php/otros_sitios.php. The manipulation of the argu… CWE-22
Path Traversal
CVE-2024-8410 2024-09-5 23:20 2024-09-5 Show GitHub Exploit DB Packet Storm
319014 7.5 HIGH
Network
abcd-community abcd A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This affects an unknown part of the file /common/show_image.php. The manipulation of the argument image lead… CWE-22
Path Traversal
CVE-2024-8409 2024-09-5 23:20 2024-09-5 Show GitHub Exploit DB Packet Storm
319015 4.3 MEDIUM
Network
abcd-community abcd A vulnerability, which was classified as problematic, has been found in ABCD ABCD2 up to 2.2.0-beta-1. This issue affects some unknown processing of the file /buscar_integrada.php. The manipulation o… CWE-79
Cross-site Scripting
CVE-2024-8411 2024-09-5 23:19 2024-09-5 Show GitHub Exploit DB Packet Storm
319016 7.8 HIGH
Local
yandex yandex_browser Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used. CWE-426
 Untrusted Search Path
CVE-2024-6473 2024-09-5 23:19 2024-09-3 Show GitHub Exploit DB Packet Storm
319017 9.6 CRITICAL
Adjacent
progress openedge Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge … CWE-94
Code Injection
CVE-2024-7345 2024-09-5 23:11 2024-09-4 Show GitHub Exploit DB Packet Storm
319018 4.8 MEDIUM
Network
progress openedge Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perform the TLS handshake for a networked connection.  This has been corrected so th… CWE-287
Improper Authentication
CVE-2024-7346 2024-09-5 23:03 2024-09-4 Show GitHub Exploit DB Packet Storm
319019 6.1 MEDIUM
Network
progress openedge An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-discovery feature was activated.  Unauthorized access to the discovery service's U… CWE-79
Cross-site Scripting
CVE-2024-7654 2024-09-5 22:53 2024-09-4 Show GitHub Exploit DB Packet Storm
319020 5.3 MEDIUM
Network
samsung group_sharing Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group. NVD-CWE-noinfo
CVE-2024-34659 2024-09-5 22:48 2024-09-4 Show GitHub Exploit DB Packet Storm