Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229051	7.5	危険	webdynamite	-	WebDynamite ProjectButler の pda_projects.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-2791	2012-12-20 19:10	2009-08-17	Show	GitHub Exploit DB Packet Storm

229052	7.5	危険	softbiz	-	SoftBiz Dating Script の cat_products.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2790	2012-12-20 19:10	2009-08-17	Show	GitHub Exploit DB Packet Storm

229053	6.8	警告	reputation	-	PunBB 用の Reputation プラグインにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-2787	2012-12-20 19:10	2009-08-17	Show	GitHub Exploit DB Packet Storm

229054	7.5	危険	reputation	-	PunBB 用の Reputation プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2786	2012-12-20 19:10	2009-08-17	Show	GitHub Exploit DB Packet Storm

229055	4.3	警告	XOOPS	-	XOOPS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2783	2012-12-20 19:10	2009-08-17	Show	GitHub Exploit DB Packet Storm

229056	7.5	危険	sellatsite.com	-	Smart ASP Survey の showresult.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2776	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

229057	7.5	危険	phparcadescript	-	PHP Arcade Script の linkout.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2775	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

229058	7.5	危険	php-paid4mail	-	PHP Paid 4 Mail Script の paidbanner.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2774	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

229059	7.5	危険	shop-020	-	PHP Paid 4 Mail Script の home.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-2773	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

229060	4.3	警告	realtysoft	-	PG Roommate Finder Solution におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2772	2012-12-20 19:10	2009-08-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225501	8.8	HIGH Network	podman_project varlink	podman varlink	A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It …	NVD-CWE-noinfo	CVE-2019-25067	2024-11-21 13:39	2022-06-10	Show	GitHub Exploit DB Packet Storm

225502	8.8	HIGH Network	ajenti	ajenti	A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack ca…	CWE-78 OS Command	CVE-2019-25066	2024-11-21 13:39	2022-06-10	Show	GitHub Exploit DB Packet Storm

225503	9.8	CRITICAL Network	opennetadmin	opennetadmin	A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may b…	CWE-78 OS Command	CVE-2019-25065	2024-11-21 13:39	2022-06-10	Show	GitHub Exploit DB Packet Storm

225504	8.8	HIGH Network	theaccessgroup	corehr_core_portal	A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possi…	CWE-352 Origin Validation Error	CVE-2019-25064	2024-11-21 13:39	2022-06-10	Show	GitHub Exploit DB Packet Storm

225505	7.8	HIGH Local	sricam	deviceviewer	A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The manipulation leads to memory corruption. Lo…	CWE-787 Out-of-bounds Write	CVE-2019-25063	2024-11-21 13:39	2022-06-8	Show	GitHub Exploit DB Packet Storm

225506	7.8	HIGH Local	sricam	deviceviewer	A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. …	CWE-787 Out-of-bounds Write	CVE-2019-25062	2024-11-21 13:39	2022-06-8	Show	GitHub Exploit DB Packet Storm

225507	7.5	HIGH Network	random_password_generator_project	random_password_generator	The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate passwords, which, due to its cyclic nature, can facilitate password prediction.	CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)	CVE-2019-25061	2024-11-21 13:39	2022-05-18	Show	GitHub Exploit DB Packet Storm

225508	5.3	MEDIUM Network	wpgraphql	wpgraphql	The WPGraphQL WordPress plugin before 0.3.5 doesn't properly restrict access to information about other users' roles on the affected site. Because of this, a remote attacker could forge a GraphQL que…	-	CVE-2019-25060	2024-11-21 13:39	2022-05-10	Show	GitHub Exploit DB Packet Storm

225509	7.8	HIGH Local	artifex debian	ghostscript debian_linux	Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839.	NVD-CWE-noinfo	CVE-2019-25059	2024-11-21 13:39	2022-04-25	Show	GitHub Exploit DB Packet Storm

225510	7.8	HIGH Local	usbguard_project fedoraproject debian	usbguard fedora debian_linux	An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.	CWE-863 Incorrect Authorization	CVE-2019-25058	2024-11-21 13:39	2022-02-25	Show	GitHub Exploit DB Packet Storm