Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229001 7.5 危険 rhadrix - Rhadrix If-CMS の frame.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0528 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
229002 10 危険 phpslash - phpSlash の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0517 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229003 6.8 警告 yanocc - YANOCC の check_lang.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0515 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229004 7.5 危険 webframe - WebFrame におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0514 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229005 7.5 危険 webframe - WebFrame における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0513 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229006 10 危険 simpleircbot - SimpleIrcBot における脆弱性 CWE-287
不適切な認証 		CVE-2009-0492 2012-12-20 19:10 2009-02-9 Show GitHub Exploit DB Packet Storm
229007 2.1 注意 David Paleino - Wicd の DBus configuration file における Wicd デーモンへのメッセージを受信される脆弱性 CWE-16
環境設定 		CVE-2009-0489 2012-12-20 19:10 2009-02-9 Show GitHub Exploit DB Packet Storm
229008 5 警告 Rockwell Automation - Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module の Web インターフェースにおける "内部の Web ページ情報" などを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-0474 2012-12-20 19:10 2009-02-6 Show GitHub Exploit DB Packet Storm
229009 4.3 警告 vivvo - Vivvo CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0466 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229010 9.3 危険 synactis - Synactis ALL In-The-Box ActiveX の ALL_IN_THE_BOX.OCX における任意のファイルを作成される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0465 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215671 5.5 MEDIUM
Local 		oppo reno3_pro_firmware
find_x2_pro_firmware 		In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, failure to check the parameter buf in the function proc_work_mode_write in proc_work_mode_write causes a vulnerability. CWE-787
 Out-of-bounds Write 		CVE-2020-11835 2024-11-21 13:58 2021-01-1 Show GitHub Exploit DB Packet Storm
215672 5.5 MEDIUM
Local 		oppo reno3_pro_firmware
find_x2_pro_firmware 		In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, the function proc_fastchg_fw_update_write in proc_fastchg_fw_update_write does not check the parameter len, resulting in a vulnerabil… CWE-787
 Out-of-bounds Write 		CVE-2020-11834 2024-11-21 13:58 2021-01-1 Show GitHub Exploit DB Packet Storm
215673 5.5 MEDIUM
Local 		oppo reno3_pro_firmware
find_x2_pro_firmware 		In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function mp2650_data_log_write in mp2650_data_log_write does not check the parameter len which causes a vulnerabilit… CWE-787
 Out-of-bounds Write 		CVE-2020-11833 2024-11-21 13:58 2021-01-1 Show GitHub Exploit DB Packet Storm
215674 5.5 MEDIUM
Local 		oppo reno3_pro_firmware
find_x2_pro_firmware 		In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_charger.c have not checked the parameters, which causes a vulnerabili… CWE-787
 Out-of-bounds Write 		CVE-2020-11832 2024-11-21 13:58 2021-01-1 Show GitHub Exploit DB Packet Storm
215675 3.8 LOW
Local 		qemu qemu iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker. CWE-125
Out-of-bounds Read 		CVE-2020-11947 2024-11-21 13:58 2020-12-31 Show GitHub Exploit DB Packet Storm
215676 7.5 HIGH
Network 		bilanc bilanc An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. It relies on broken encryption with a weak and guessable static encryption key. CWE-798
 Use of Hard-coded Credentials 		CVE-2020-11719 2024-11-21 13:58 2020-12-24 Show GitHub Exploit DB Packet Storm
215677 9.8 CRITICAL
Network 		bilanc bilanc An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. During the installation, it sets up administrative access by default with the account admin and passwor… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-11720 2024-11-21 13:58 2020-12-24 Show GitHub Exploit DB Packet Storm
215678 7.4 HIGH
Network 		bilanc bilanc An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and below. Its software-update packages are downloaded via cleartext HTTP. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-11718 2024-11-21 13:58 2020-12-24 Show GitHub Exploit DB Packet Storm
215679 9.8 CRITICAL
Network 		bilanc bilanc An issue was discovered in Programi 014 31.01.2020. It has multiple SQL injection vulnerabilities. CWE-89
SQL Injection 		CVE-2020-11717 2024-11-21 13:58 2020-12-22 Show GitHub Exploit DB Packet Storm
215680 3.3 LOW
Local 		audacityteam
fedoraproject 		audacity
fedora 		Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and… CWE-276
Incorrect Default Permissions  		CVE-2020-11867 2024-11-21 13:58 2020-12-1 Show GitHub Exploit DB Packet Storm