Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 12:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228851 4.3 警告 Scriptsez.net - ScriptsEz Ez Blog の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4365 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228852 4.3 警告 Scriptsez.net - ScriptsEz Ez Blog の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4364 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228853 6.8 警告 wscreator - WSCreator の ADMIN/loginaction.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4351 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228854 6.8 警告 PHP Web Scripts - Link Up Gold の administration/administrators.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4349 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228855 4.3 警告 toni milovan - TYPO3 用の RTE エクステンションを伴う Frontend ニュース投稿ツールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4346 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228856 4.3 警告 tobias sommer - TYPO3 用の ZID Linkliste エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4344 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228857 7.5 危険 stephan vits - TYPO3 用の mf_subscription エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4339 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228858 7.5 危険 fr.simon rundell - TYPO3 用の pd_calendar エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4337 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228859 4.3 警告 fr.simon rundell - TYPO3 用の pd_calendar エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4336 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
228860 7.5 危険 Zen Cart - Zen Cart のインストールにおける重要な情報を取得される脆弱性 CWE-Other
その他 		CVE-2009-4323 2012-12-20 19:28 2009-11-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194741 5.4 MEDIUM
Network 		alkacon opencms In “OpenCMS”, versions 10.5.0 to 11.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the Sitemap functionality. These scripts … CWE-79
Cross-site Scripting 		CVE-2021-25968 2024-11-21 14:55 2021-10-19 Show GitHub Exploit DB Packet Storm
194742 7.5 HIGH
Network 		libreoffice
debian 		libreoffice
debian_linux 		LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature … CWE-295
Improper Certificate Validation  		CVE-2021-25634 2024-11-21 14:55 2021-10-12 Show GitHub Exploit DB Packet Storm
194743 6.7 MEDIUM
Local 		kubernetes java Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution. CWE-502
 Deserialization of Untrusted Data 		CVE-2021-25738 2024-11-21 14:55 2021-10-12 Show GitHub Exploit DB Packet Storm
194744 7.5 HIGH
Network 		libreoffice
debian 		libreoffice
debian_linux 		LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature … CWE-295
Improper Certificate Validation  		CVE-2021-25633 2024-11-21 14:55 2021-10-12 Show GitHub Exploit DB Packet Storm
194745 8.8 HIGH
Network 		orchardcore orchard_core In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an ad… CWE-613
 Insufficient Session Expiration 		CVE-2021-25966 2024-11-21 14:55 2021-10-10 Show GitHub Exploit DB Packet Storm
194746 5.5 MEDIUM
Local 		samsung galaxy_store Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store. NVD-CWE-noinfo
CVE-2021-25499 2024-11-21 14:55 2021-10-7 Show GitHub Exploit DB Packet Storm
194747 7.8 HIGH
Local 		samsung notes A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution. CWE-120
Classic Buffer Overflow 		CVE-2021-25498 2024-11-21 14:55 2021-10-7 Show GitHub Exploit DB Packet Storm
194748 7.8 HIGH
Local 		samsung notes A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution. CWE-120
Classic Buffer Overflow 		CVE-2021-25497 2024-11-21 14:55 2021-10-7 Show GitHub Exploit DB Packet Storm
194749 7.8 HIGH
Local 		samsung notes A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution. CWE-120
Classic Buffer Overflow 		CVE-2021-25496 2024-11-21 14:55 2021-10-7 Show GitHub Exploit DB Packet Storm
194750 7.8 HIGH
Local 		samsung notes A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution. CWE-787
 Out-of-bounds Write 		CVE-2021-25495 2024-11-21 14:55 2021-10-7 Show GitHub Exploit DB Packet Storm