Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228691 9.3 危険 ultrafunk - Ultrafunk Popcorn の popcorn.exe におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1647 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
228692 9.3 危険 sorinara - Sorinara Streaming Audio Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1644 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
228693 9.3 危険 sorinara - Sorinara Soritong MP3 Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1643 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
228694 7.5 危険 t-dreams - Techno Dreams Job Career Package における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1638 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
228695 6.4 警告 simplecustomer - Simple Customer の profile.php における admin 電子メールアドレスなどを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1637 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
228696 10 危険 Unisys - Windows 上で稼動している Unisys BIS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1628 2012-12-20 19:10 2009-06-26 Show GitHub Exploit DB Packet Storm
228697 9.3 危険 sdp multimedia - SDP Downloader におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1627 2012-12-20 19:10 2009-05-12 Show GitHub Exploit DB Packet Storm
228698 7.5 危険 will kraft - EZ-Blog の public/specific.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1626 2012-12-20 19:10 2009-05-12 Show GitHub Exploit DB Packet Storm
228699 7.5 危険 teraway - Teraway FileStream における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1619 2012-12-20 19:10 2009-05-12 Show GitHub Exploit DB Packet Storm
228700 7.5 危険 teraway - Teraway LiveHelp における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1618 2012-12-20 19:10 2009-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215911 7.8 HIGH
Local 		v2rayl_project v2rayl v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privileged user but execute as root via Sudo. CWE-269
 Improper Privilege Management 		CVE-2020-10588 2024-11-21 13:55 2020-03-16 Show GitHub Exploit DB Packet Storm
215912 7.8 HIGH
Local 		antixlinux
mxlinux 		antix_linux
mx_linux 		antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration. NVD-CWE-noinfo
CVE-2020-10587 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
215913 7.5 HIGH
Network 		q-cms qcms An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1. NVD-CWE-noinfo
CVE-2020-10578 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
215914 4.8 MEDIUM
Network 		meetecho janus An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions. CWE-362
Race Condition 		CVE-2020-10577 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
215915 5.9 MEDIUM
Network 		meetecho janus An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition that could cause a server crash. CWE-362
Race Condition 		CVE-2020-10576 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
215916 4.2 MEDIUM
Network 		meetecho janus An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early o… CWE-362
Race Condition 		CVE-2020-10575 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
215917 9.8 CRITICAL
Network 		meetecho janus An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation. CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2020-10574 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
215918 7.5 HIGH
Network 		meetecho janus An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private rooms in AudioBridge. CWE-667
 Improper Locking 		CVE-2020-10573 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
215919 9.8 CRITICAL
Network 		psd-tools_project psd-tools An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2020-10571 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
215920 8.8 HIGH
Network 		onthegosystems sitepress-multilingual-cms The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of … CWE-352
 Origin Validation Error 		CVE-2020-10568 2024-11-21 13:55 2020-03-14 Show GitHub Exploit DB Packet Storm