Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229031 6 警告 ricardo alexandre de oliveira staudt - Yogurt の writemessage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2034 2012-12-20 19:10 2009-06-12 Show GitHub Exploit DB Packet Storm
229032 4.3 警告 ricardo alexandre de oliveira staudt - Yogurt の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2033 2012-12-20 19:10 2009-06-12 Show GitHub Exploit DB Packet Storm
229033 2.1 注意 サン・マイクロシステムズ - Sun OpenSolaris の smbfs における CIFS ボリューム上で任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2009-2031 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229034 10 危険 サン・マイクロシステムズ
IBM		 - IBM OS/400 i5/OS V5R4M0 および V6R1M0 の JDK における脆弱性 CWE-noinfo
情報不足 		CVE-2009-2030 2012-12-20 19:10 2009-06-11 Show GitHub Exploit DB Packet Storm
229035 5 警告 vt.rovno - Vlad Titarenko ASP VT Auth におけるユーザ名などを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2024 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229036 6.8 警告 shop-script - Shop-Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2023 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229037 7.5 危険 Virtue Netz - Virtue Classifieds の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2021 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229038 4.3 警告 Virtue Netz - Virtue News Manager の news_detail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2020 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229039 7.5 危険 Virtue Netz - Virtue News Manager の news_detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2019 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229040 7.5 危険 Virtue Netz - Virtue Book Store の products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2017 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
216021 5.5 MEDIUM
Local 		kde amarok A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time,… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-13152 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
216022 9.8 CRITICAL
Network 		smartbear readyapi An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into th… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-12835 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
216023 9.8 CRITICAL
Network 		wso2 api_manager WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-13226 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
216024 4.8 MEDIUM
Network 		phpipam phpipam phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget. CWE-79
Cross-site Scripting 		CVE-2020-13225 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
216025 7.5 HIGH
Network 		wireshark
debian
opensuse
fedoraproject 		wireshark
debian_linux
leap
fedora 		In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a c… CWE-674
 Uncontrolled Recursion 		CVE-2020-13164 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
216026 7.4 HIGH
Network 		em-imap_project em-imap em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is no… CWE-295
Improper Certificate Validation  		CVE-2020-13163 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
216027 9.8 CRITICAL
Network 		netsweeper netsweeper Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and … CWE-78
OS Command  		CVE-2020-13167 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
216028 9.8 CRITICAL
Network 		mylittletools mylittleadmin The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used t… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-13166 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
216029 7.5 HIGH
Network 		nlnetlabs
debian
opensuse
canonical
fedoraproject 		unbound
debian_linux
leap
ubuntu_linux
fedora 		Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-12663 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216030 7.5 HIGH
Network 		nlnetlabs
debian
opensuse
canonical
fedoraproject 		unbound
debian_linux
leap
ubuntu_linux
fedora 		Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-12662 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm