Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229831 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2284 2012-12-20 19:10 2009-06-30 Show GitHub Exploit DB Packet Storm
229832 10 危険 UMN - MapServer の mapserv におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2281 2012-12-20 19:10 2009-10-22 Show GitHub Exploit DB Packet Storm
229833 2.6 注意 サン・マイクロシステムズ - Sun Java System Access Manager の CDC servlet におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2268 2012-12-20 19:10 2009-06-29 Show GitHub Exploit DB Packet Storm
229834 5 警告 stardict - stardict における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2009-2260 2012-12-20 19:10 2009-06-30 Show GitHub Exploit DB Packet Storm
229835 6.8 警告 Zen Cart - Zen Cart における任意のコードを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2255 2012-12-20 19:10 2009-06-21 Show GitHub Exploit DB Packet Storm
229836 7.5 危険 Zen Cart - Zen Cart における任意の SQL コマンドを実行される脆弱性 CWE-89
SQLインジェクション
CVE-2009-2254 2012-12-20 19:10 2009-06-21 Show GitHub Exploit DB Packet Storm
229837 7.5 危険 Your Articles Directory - Your Article Directory の yad-admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2236 2012-12-20 19:10 2009-06-27 Show GitHub Exploit DB Packet Storm
229838 7.5 危険 Your Articles Directory - Your Articles Directory の page.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2235 2012-12-20 19:10 2009-06-27 Show GitHub Exploit DB Packet Storm
229839 7.5 危険 VICIDIAL Group - VICIDIAL Call Center Suite の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2234 2012-12-20 19:10 2009-06-27 Show GitHub Exploit DB Packet Storm
229840 7.5 危険 SoftbizScripts - Softbiz Banner Ad Management Script の image.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2232 2012-12-20 19:10 2009-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196371 7.8 HIGH
Local
opendesign
siemens
drawings_software_development_kit
jt2go
teamcenter_visualization
comos
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. T… CWE-787
 Out-of-bounds Write
CVE-2021-25178 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
196372 7.8 HIGH
Local
opendesign
siemens
drawings_software_development_kit
jt2go
teamcenter_visualization
comos
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, pot… CWE-843
Type Confusion
CVE-2021-25177 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
196373 7.8 HIGH
Local
opendesign
siemens
drawings_software_development_kit
jt2go
teamcenter_visualization
comos
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash,… CWE-476
 NULL Pointer Dereference
CVE-2021-25176 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
196374 7.8 HIGH
Local
opendesign
siemens
drawings_software_development_kit
jt2go
teamcenter_visualization
comos
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, po… CWE-704
 Incorrect Type Conversion or Cast
CVE-2021-25175 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
196375 7.8 HIGH
Local
opendesign
siemens
drawings_software_development_kit
jt2go
teamcenter_visualization
comos
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potent… CWE-787
 Out-of-bounds Write
CVE-2021-25174 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
196376 7.8 HIGH
Local
opendesign
siemens
drawings_software_development_kit
jt2go
teamcenter_visualization
comos
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to c… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2021-25173 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
196377 6.1 MEDIUM
Network
opencats opencats OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues. CWE-79
Cross-site Scripting
CVE-2021-25295 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
196378 9.8 CRITICAL
Network
opencats opencats OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This occurs because lib/DataGrid.php calls unserialize for the parametersactivity:Activ… CWE-502
 Deserialization of Untrusted Data
CVE-2021-25294 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
196379 6.1 MEDIUM
Network
wpfastestcache wp_fastest_cache The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, wh… CWE-352
 Origin Validation Error
CVE-2021-24870 2024-11-21 14:53 2024-01-17 Show GitHub Exploit DB Packet Storm
196380 8.8 HIGH
Network
wpfastestcache wp_fastest_cache The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low priv… CWE-89
SQL Injection
CVE-2021-24869 2024-11-21 14:53 2024-01-17 Show GitHub Exploit DB Packet Storm