Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228801	9.3	危険	ultrafunk	-	Ultrafunk Popcorn の popcorn.exe におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1647	2012-12-20 19:10	2009-05-15	Show	GitHub Exploit DB Packet Storm

228802	9.3	危険	sorinara	-	Sorinara Streaming Audio Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1644	2012-12-20 19:10	2009-05-15	Show	GitHub Exploit DB Packet Storm

228803	9.3	危険	sorinara	-	Sorinara Soritong MP3 Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1643	2012-12-20 19:10	2009-05-15	Show	GitHub Exploit DB Packet Storm

228804	7.5	危険	t-dreams	-	Techno Dreams Job Career Package における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-1638	2012-12-20 19:10	2009-05-15	Show	GitHub Exploit DB Packet Storm

228805	6.4	警告	simplecustomer	-	Simple Customer の profile.php における admin 電子メールアドレスなどを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1637	2012-12-20 19:10	2009-05-15	Show	GitHub Exploit DB Packet Storm

228806	10	危険	Unisys	-	Windows 上で稼動している Unisys BIS におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1628	2012-12-20 19:10	2009-06-26	Show	GitHub Exploit DB Packet Storm

228807	9.3	危険	sdp multimedia	-	SDP Downloader におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1627	2012-12-20 19:10	2009-05-12	Show	GitHub Exploit DB Packet Storm

228808	7.5	危険	will kraft	-	EZ-Blog の public/specific.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1626	2012-12-20 19:10	2009-05-12	Show	GitHub Exploit DB Packet Storm

228809	7.5	危険	teraway	-	Teraway FileStream における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-1619	2012-12-20 19:10	2009-05-12	Show	GitHub Exploit DB Packet Storm

228810	7.5	危険	teraway	-	Teraway LiveHelp における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-1618	2012-12-20 19:10	2009-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194941	7.5	HIGH Network	startserver_project	startserver	All versions of package startserver are vulnerable to Directory Traversal due to missing sanitization.	CWE-22 Path Traversal	CVE-2021-23430	2024-11-21 14:51	2021-08-24	Show	GitHub Exploit DB Packet Storm

194942	7.5	HIGH Network	transpile_project	transpile	All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to() function.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2021-23429	2024-11-21 14:51	2021-08-24	Show	GitHub Exploit DB Packet Storm

194943	9.8	CRITICAL Network	pac-resolver_project	pac-resolver	This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. NOTE: The fix for this vulnerability is applied in the node-deg…	NVD-CWE-noinfo	CVE-2021-23406	2024-11-21 14:51	2021-08-24	Show	GitHub Exploit DB Packet Storm

194944	5.3	MEDIUM Network	trim-off-newlines_project	trim-off-newlines	All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.	NVD-CWE-noinfo	CVE-2021-23425	2024-11-21 14:51	2021-08-19	Show	GitHub Exploit DB Packet Storm

194945	7.5	HIGH Network	ansi-html_project	ansi-html	This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time.	NVD-CWE-noinfo	CVE-2021-23424	2024-11-21 14:51	2021-08-19	Show	GitHub Exploit DB Packet Storm

194946	7.5	HIGH Network	bikeshed_project	bikeshed	This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could …	CWE-22 Path Traversal	CVE-2021-23423	2024-11-21 14:51	2021-08-16	Show	GitHub Exploit DB Packet Storm

194947	7.8	HIGH Local	bikeshed_project	bikeshed	This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command…	CWE-78 OS Command	CVE-2021-23422	2024-11-21 14:51	2021-08-16	Show	GitHub Exploit DB Packet Storm

194948	9.8	CRITICAL Network	merge-change_project	merge-change	All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23421	2024-11-21 14:51	2021-08-12	Show	GitHub Exploit DB Packet Storm

194949	9.8	CRITICAL Network	codeception	codeception	This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializ…	CWE-502 Deserialization of Untrusted Data	CVE-2021-23420	2024-11-21 14:51	2021-08-11	Show	GitHub Exploit DB Packet Storm

194950	9.8	CRITICAL Network	open-graph_project	open-graph	This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor payload.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23419	2024-11-21 14:51	2021-08-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed