Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228691	10	危険	UMN	-	MapServer の mapserv におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2281	2012-12-20 19:10	2009-10-22	Show	GitHub Exploit DB Packet Storm

228692	2.6	注意	サン・マイクロシステムズ	-	Sun Java System Access Manager の CDC servlet におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2268	2012-12-20 19:10	2009-06-29	Show	GitHub Exploit DB Packet Storm

228693	5	警告	stardict	-	stardict における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-2260	2012-12-20 19:10	2009-06-30	Show	GitHub Exploit DB Packet Storm

228694	6.8	警告	Zen Cart	-	Zen Cart における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2255	2012-12-20 19:10	2009-06-21	Show	GitHub Exploit DB Packet Storm

228695	7.5	危険	Zen Cart	-	Zen Cart における任意の SQL コマンドを実行される脆弱性	CWE-89 SQLインジェクション	CVE-2009-2254	2012-12-20 19:10	2009-06-21	Show	GitHub Exploit DB Packet Storm

228696	7.5	危険	Your Articles Directory	-	Your Article Directory の yad-admin/login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2236	2012-12-20 19:10	2009-06-27	Show	GitHub Exploit DB Packet Storm

228697	7.5	危険	Your Articles Directory	-	Your Articles Directory の page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2235	2012-12-20 19:10	2009-06-27	Show	GitHub Exploit DB Packet Storm

228698	7.5	危険	VICIDIAL Group	-	VICIDIAL Call Center Suite の admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2234	2012-12-20 19:10	2009-06-27	Show	GitHub Exploit DB Packet Storm

228699	7.5	危険	SoftbizScripts	-	Softbiz Banner Ad Management Script の image.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2232	2012-12-20 19:10	2009-06-26	Show	GitHub Exploit DB Packet Storm

228700	9.3	危険	surething	-	SureThing CD/DVD Labeler におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2225	2012-12-20 19:10	2009-06-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225931	4.8	MEDIUM Network	nopcommerce	nopcommerce	nopCommerce through 4.20 allows XSS in the SaveStoreMappings of the components \Presentation\Nop.Web\Areas\Admin\Controllers\NewsController.cs and \Presentation\Nop.Web\Areas\Admin\Controllers\BlogCo…	CWE-79 Cross-site Scripting	CVE-2019-19682	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

225932	5.4	MEDIUM Network	xpand-it	xray_test_mangaement	In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action…	CWE-79 Cross-site Scripting	CVE-2019-19679	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

225933	5.4	MEDIUM Network	xpand-it	xray_test_mangaement	In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test is…	CWE-79 Cross-site Scripting	CVE-2019-19678	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

225934	5.5	MEDIUM Local	sqlite netapp oracle tenable siemens	sqlite cloud_backup ontap_select_deploy_administration_utility mysql_workbench tenable.sc sinec_infrastructure_network_services	alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.	CWE-674 Uncontrolled Recursion	CVE-2019-19645	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

225935	7.8	HIGH Local	virustotal fedoraproject	yara fedora	In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access, re…	CWE-125 Out-of-bounds Read	CVE-2019-19648	2024-11-21 13:35	2019-12-9	Show	GitHub Exploit DB Packet Storm

225936	7.8	HIGH Local	radare fedoraproject	radare2 fedora	radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a…	CWE-476 NULL Pointer Dereference	CVE-2019-19647	2024-11-21 13:35	2019-12-9	Show	GitHub Exploit DB Packet Storm

225937	8.8	HIGH Network	supermicro	x8sti-f_bios x8sti-f_firmware	On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP a…	CWE-78 OS Command	CVE-2019-19642	2024-11-21 13:35	2019-12-8	Show	GitHub Exploit DB Packet Storm

225938	7.8	HIGH Local	htmldoc_project debian fedoraproject	htmldoc debian_linux fedora	HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.	CWE-787 Out-of-bounds Write	CVE-2019-19630	2024-11-21 13:35	2019-12-8	Show	GitHub Exploit DB Packet Storm

225939	5.3	MEDIUM Network	ros	sros2	SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration. (SROS2 provides the tools to generate and distribute keys f…	CWE-200 Information Exposure	CVE-2019-19627	2024-11-21 13:35	2019-12-7	Show	GitHub Exploit DB Packet Storm

225940	5.3	MEDIUM Network	ros	sros2	SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2) leaks node information due to a leaky…	CWE-200 Information Exposure	CVE-2019-19625	2024-11-21 13:35	2019-12-7	Show	GitHub Exploit DB Packet Storm