Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229261	6.8	警告	SemanticScuttle	-	SemanticScuttle におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-0708	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

229262	7.5	危険	powerscripts	-	PowerClan の admin/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0707	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

229263	7.5	危険	simple-review	-	Joomla! および Mambo 用の simple_review コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0706	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

229264	6.8	警告	powerscripts	-	PowerScripts PowerNews の news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0705	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

229265	7.5	危険	webmastersite	-	WSN Guest の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0704	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

229266	4	警告	plunet	-	Plunet BusinessManager における重要な Customer または Order データを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-0700	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

229267	3.5	注意	plunet	-	Plunet BusinessManager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0699	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

229268	7.2	危険	トレンドマイクロ	-	Trend Micro Internet Pro および Security Pro の TrendMicro Activity Monitor Module における権限を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2009-0686	2012-12-20 19:10	2009-04-1	Show	GitHub Exploit DB Packet Storm

229269	4.3	警告	ravenphpscripts	-	RavenNuke の Your Account モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0679	2012-12-20 19:10	2009-02-18	Show	GitHub Exploit DB Packet Storm

229270	5	警告	ravenphpscripts	-	RavenNuke の images/captcha.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-0678	2012-12-20 19:10	2009-02-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195451	9.8	CRITICAL Network	htmldoc_project	htmldoc	A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of s…	CWE-415 Double Free	CVE-2021-23158	2024-11-21 14:51	2022-03-17	Show	GitHub Exploit DB Packet Storm

195452	7.5	HIGH Network	oppo	coloros	In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.	NVD-CWE-noinfo	CVE-2021-23246	2024-11-21 14:51	2022-03-12	Show	GitHub Exploit DB Packet Storm

195453	8.1	HIGH Network	postgresql fedoraproject redhat	postgresql fedora software_collections enterprise_linux enterprise_linux_for_power_little_endian enterprise_linux_for_ibm_z_systems	When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection …	-	CVE-2021-23214	2024-11-21 14:51	2022-03-5	Show	GitHub Exploit DB Packet Storm

195454	5.9	MEDIUM Network	postgresql	postgresql	A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.	-	CVE-2021-23222	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195455	7.8	HIGH Local	htmldoc_project	htmldoc	A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to execute arbitrary code and denial of service.	CWE-787 Out-of-bounds Write	CVE-2021-23206	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195456	7.5	HIGH Network	samba	samba	A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their …	NVD-CWE-noinfo	CVE-2021-23192	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195457	7.8	HIGH Local	htmldoc_project	htmldoc	A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of service.	CWE-476 NULL Pointer Dereference	CVE-2021-23191	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195458	7.8	HIGH Local	htmldoc_project	htmldoc	A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary code and denial of service.	CWE-476 NULL Pointer Dereference	CVE-2021-23180	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195459	6.1	MEDIUM Network	karma_project	karma	The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.	CWE-601 Open Redirect	CVE-2021-23495	2024-11-21 14:51	2022-02-26	Show	GitHub Exploit DB Packet Storm

195460	9.8	CRITICAL Network	object-extend_project	object-extend	The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23702	2024-11-21 14:51	2022-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed