Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228691 6.8 警告 Zen Cart - Zen Cart における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-2255 2012-12-20 19:10 2009-06-21 Show GitHub Exploit DB Packet Storm
228692 7.5 危険 Zen Cart - Zen Cart における任意の SQL コマンドを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2254 2012-12-20 19:10 2009-06-21 Show GitHub Exploit DB Packet Storm
228693 7.5 危険 Your Articles Directory - Your Article Directory の yad-admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2236 2012-12-20 19:10 2009-06-27 Show GitHub Exploit DB Packet Storm
228694 7.5 危険 Your Articles Directory - Your Articles Directory の page.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2235 2012-12-20 19:10 2009-06-27 Show GitHub Exploit DB Packet Storm
228695 7.5 危険 VICIDIAL Group - VICIDIAL Call Center Suite の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2234 2012-12-20 19:10 2009-06-27 Show GitHub Exploit DB Packet Storm
228696 7.5 危険 SoftbizScripts - Softbiz Banner Ad Management Script の image.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2232 2012-12-20 19:10 2009-06-26 Show GitHub Exploit DB Packet Storm
228697 9.3 危険 surething - SureThing CD/DVD Labeler におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2225 2012-12-20 19:10 2009-06-26 Show GitHub Exploit DB Packet Storm
228698 9.3 危険 teozkr - LightOpenCMS の locms/smarty.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2223 2012-12-20 19:10 2009-06-26 Show GitHub Exploit DB Packet Storm
228699 5.1 警告 Tribal Ltd. - Tribiq CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2220 2012-12-20 19:10 2009-06-26 Show GitHub Exploit DB Packet Storm
228700 4.3 警告 urdland - URD におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2215 2012-12-20 19:10 2009-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194811 6.1 MEDIUM
Network 		mozilla firefox The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability affects Firefox < 85. CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2021-23955 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194812 8.8 HIGH
Network 		mozilla firefox
firefox_esr
thunderbird 		Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability … CWE-843
Type Confusion 		CVE-2021-23954 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194813 4.3 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects … NVD-CWE-noinfo
CVE-2021-23953 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194814 8.1 HIGH
Network 		mozilla firefox When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be u… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2021-23976 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194815 6.5 MEDIUM
Network 		mozilla firefox The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof funct… CWE-862
 Missing Authorization 		CVE-2021-23975 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194816 6.1 MEDIUM
Network 		mozilla firefox The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86. NVD-CWE-noinfo
CVE-2021-23974 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194817 6.5 MEDIUM
Network 		mozilla
debian 		firefox
firefox_esr
thunderbird
debian_linux 		When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerab… CWE-209
Information Exposure Through an Error Message 		CVE-2021-23973 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194818 8.8 HIGH
Network 		mozilla firefox One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www.phishingtarget.com@evil.com'. To mitigate this type of attack, Firefox will display a warning dialog; howe… NVD-CWE-noinfo
CVE-2021-23972 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194819 6.5 MEDIUM
Network 		mozilla firefox When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the… NVD-CWE-noinfo
CVE-2021-23971 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194820 6.5 MEDIUM
Network 		mozilla firefox Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox < 86. CWE-617
 Reachable Assertion 		CVE-2021-23970 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm