Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228891 4.3 警告 Rapid Leech - Rapidleech の upload.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1091 2012-12-20 19:10 2009-03-25 Show GitHub Exploit DB Packet Storm
228892 6.8 警告 Rapid Leech - Rapidleech の upload.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1090 2012-12-20 19:10 2009-03-25 Show GitHub Exploit DB Packet Storm
228893 9 危険 サン・マイクロシステムズ - Sun Java System IdM における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1083 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
228894 9 危険 サン・マイクロシステムズ - Sun Java System IdM における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1082 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
228895 4.3 警告 サン・マイクロシステムズ - Sun Java System IdM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1081 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
228896 4.3 警告 サン・マイクロシステムズ - Sun Java System IdM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1080 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
228897 4.3 警告 サン・マイクロシステムズ - Sun Java System IdM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1079 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
228898 4 警告 サン・マイクロシステムズ - Sun Java System IdM における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1078 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
228899 6.5 警告 サン・マイクロシステムズ - Sun Java System IdM の Change My Password 実装における他のユーザのパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1077 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
228900 5 警告 サン・マイクロシステムズ - Sun Java System Identity Manager IdM における有効なユーザ名を列挙される脆弱性 CWE-200
情報漏えい 		CVE-2009-1076 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194941 9.8 CRITICAL
Network 		juce juce The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability… CWE-22
Path Traversal 		CVE-2021-23520 2024-11-21 14:51 2022-01-31 Show GitHub Exploit DB Packet Storm
194942 9.8 CRITICAL
Network 		keyget_project keyget The package keyget from 0.0.0 are vulnerable to Prototype Pollution via the methods set, push, and at which could allow an attacker to cause a denial of service and may lead to remote code execution.… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23760 2024-11-21 14:51 2022-01-29 Show GitHub Exploit DB Packet Storm
194943 9.8 CRITICAL
Network 		bmoor_project bmoor The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. **Note:** This vulnerability derives from an incomplete fix in [CVE-2020-7736](https… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23558 2024-11-21 14:51 2022-01-29 Show GitHub Exploit DB Packet Storm
194944 9.8 CRITICAL
Network 		zip-local_project zip-local The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory. CWE-22
Path Traversal 		CVE-2021-23484 2024-11-21 14:51 2022-01-29 Show GitHub Exploit DB Packet Storm
194945 6.1 MEDIUM
Network 		bosch video_security HTML code injection vulnerability in Android Application, Bosch Video Security, version 3.2.3. or earlier, when successfully exploited allows an attacker to inject random HTML code into a component l… CWE-79
Cross-site Scripting 		CVE-2021-23863 2024-11-21 14:51 2022-01-29 Show GitHub Exploit DB Packet Storm
194946 4.8 MEDIUM
Network 		wpchill download_monitor Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6) Vulnerable parameters: &post_title, &downloadable_file_v… - CVE-2021-23174 2024-11-21 14:51 2022-01-29 Show GitHub Exploit DB Packet Storm
194947 7.5 HIGH
Network 		isomorphic-git cors-proxy The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-23664 2024-11-21 14:51 2022-01-22 Show GitHub Exploit DB Packet Storm
194948 7.5 HIGH
Network 		convert-svg-core_project convert-svg-core This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a specially crafted SVG file, an attacker could r… CWE-22
Path Traversal 		CVE-2021-23631 2024-11-21 14:51 2022-01-22 Show GitHub Exploit DB Packet Storm
194949 9.8 CRITICAL
Network 		cached-path-relative_project
debian 		cached-path-relative
debian_linux 		The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create(null) in the cachedPathRelative function, which a… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23518 2024-11-21 14:51 2022-01-22 Show GitHub Exploit DB Packet Storm
194950 7.5 HIGH
Network 		camunda min-dash The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of key types. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23460 2024-11-21 14:51 2022-01-22 Show GitHub Exploit DB Packet Storm