Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229031 6 警告 ricardo alexandre de oliveira staudt - Yogurt の writemessage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2034 2012-12-20 19:10 2009-06-12 Show GitHub Exploit DB Packet Storm
229032 4.3 警告 ricardo alexandre de oliveira staudt - Yogurt の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2033 2012-12-20 19:10 2009-06-12 Show GitHub Exploit DB Packet Storm
229033 2.1 注意 サン・マイクロシステムズ - Sun OpenSolaris の smbfs における CIFS ボリューム上で任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2009-2031 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229034 10 危険 サン・マイクロシステムズ
IBM
- IBM OS/400 i5/OS V5R4M0 および V6R1M0 の JDK における脆弱性 CWE-noinfo
情報不足
CVE-2009-2030 2012-12-20 19:10 2009-06-11 Show GitHub Exploit DB Packet Storm
229035 5 警告 vt.rovno - Vlad Titarenko ASP VT Auth におけるユーザ名などを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2024 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229036 6.8 警告 shop-script - Shop-Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2023 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229037 7.5 危険 Virtue Netz - Virtue Classifieds の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2021 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229038 4.3 警告 Virtue Netz - Virtue News Manager の news_detail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2020 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229039 7.5 危険 Virtue Netz - Virtue News Manager の news_detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2019 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
229040 7.5 危険 Virtue Netz - Virtue Book Store の products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2017 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
216031 7.5 HIGH
Network
nic knot_resolver Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME i… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-12667 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216032 6.5 MEDIUM
Network
zohocorp manageengine_servicedesk_plus Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet. CWE-862
 Missing Authorization
CVE-2020-13154 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216033 6.1 MEDIUM
Network
misp misp app/View/Events/resolved_attributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view. CWE-79
Cross-site Scripting
CVE-2020-13153 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216034 5.4 MEDIUM
Network
dolibarr dolibarr Dolibarr before 11.0.4 allows XSS. CWE-79
Cross-site Scripting
CVE-2020-13094 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216035 7.8 HIGH
Local
msi dragon_center Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Micro-Star MSI Gaming laptops, allows local authenticated users to overwrite syste… CWE-276
Incorrect Default Permissions 
CVE-2020-13149 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216036 8.8 HIGH
Network
edx open_edx_platform Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a formula that is exported via the "Course>Data Downloads>Reports>Download profil… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2020-13146 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216037 5.4 MEDIUM
Network
edx open_edx_platform Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content>File Uploads" screen. These files can contain JavaScript code and thus lead to Stored XSS. CWE-79
Cross-site Scripting
CVE-2020-13145 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216038 8.8 HIGH
Network
edx open_edx_platform Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>New subsection>New unit>Add new component>Problem button>Advanced tab>Custom Pyth… CWE-94
CWE-862
Code Injection
 Missing Authorization
CVE-2020-13144 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216039 6.5 MEDIUM
Network
linux
opensuse
debian
canonical
netapp
linux_kernel
leap
debian_linux
ubuntu_linux
cloud_backup
element_software
steelstore_cloud_integrated_storage
solidfire
hci_management_node
active_iq_unified_manager
sol…
gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attack… CWE-125
Out-of-bounds Read
CVE-2020-13143 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
216040 7.5 HIGH
Network
dlink dsp-w215_firmware D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer. NVD-CWE-noinfo
CVE-2020-13136 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm