Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229951 4.3 警告 Ubercart - Drupal 用の Ubercart モジュールにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-4772 2012-12-20 19:28 2009-11-18 Show GitHub Exploit DB Packet Storm
229952 5 警告 Ubercart - Drupal 用の Ubercart モジュールにおける不特定の "複製操作" を誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4771 2012-12-20 19:28 2009-11-18 Show GitHub Exploit DB Packet Storm
229953 9 危険 Codeorigin - Sysax Multi Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4790 2012-12-20 19:28 2010-04-22 Show GitHub Exploit DB Packet Storm
229954 7.2 危険 tukeva - TUKEVA Password Reminder における資格情報を発見される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-4781 2012-12-20 19:28 2010-04-21 Show GitHub Exploit DB Packet Storm
229955 7.5 危険 robert garrigos - NukeHall における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4779 2012-12-20 19:28 2010-04-21 Show GitHub Exploit DB Packet Storm
229956 4.3 警告 Plohni - Plohni Shoutbox の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4767 2012-12-20 19:28 2010-04-20 Show GitHub Exploit DB Packet Storm
229957 5 警告 yasirpro - YP Portal MS-Pro Surumu におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4766 2012-12-20 19:28 2010-04-13 Show GitHub Exploit DB Packet Storm
229958 6.8 警告 phpmyvisites - phpMyVisites に使用されている ClickHeat プラグインにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-4763 2012-12-20 19:28 2010-03-30 Show GitHub Exploit DB Packet Storm
229959 5 警告 Winn GuestBook - Winn ASP Guestbook におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4760 2012-12-20 19:28 2010-03-29 Show GitHub Exploit DB Packet Storm
229960 7.5 危険 phppower - Swinger Club Portal の anzeiger/start.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4752 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196061 5.4 MEDIUM
Network 		open-xchange open-xchange_appsuite OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-26699 2024-11-21 14:56 2021-07-23 Show GitHub Exploit DB Packet Storm
196062 6.1 MEDIUM
Network 		open-xchange open-xchange_appsuite OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and the dl parameter is used. CWE-79
Cross-site Scripting 		CVE-2021-26698 2024-11-21 14:56 2021-07-23 Show GitHub Exploit DB Packet Storm
196063 9.8 CRITICAL
Network 		phpgurukul student_record_system SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php. CWE-89
SQL Injection 		CVE-2021-26765 2024-11-21 14:56 2021-07-23 Show GitHub Exploit DB Packet Storm
196064 8.8 HIGH
Network 		phpgurukul student_record_system SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php. CWE-89
SQL Injection 		CVE-2021-26764 2024-11-21 14:56 2021-07-23 Show GitHub Exploit DB Packet Storm
196065 8.8 HIGH
Network 		phpgurukul student_record_system SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php. CWE-89
SQL Injection 		CVE-2021-26762 2024-11-21 14:56 2021-07-23 Show GitHub Exploit DB Packet Storm
196066 7.1 HIGH
Local 		ninjarmm ninjarmm The Agent in NinjaRMM 5.0.909 has Insecure Permissions. CWE-276
Incorrect Default Permissions  		CVE-2021-26274 2024-11-21 14:56 2021-07-7 Show GitHub Exploit DB Packet Storm
196067 7.8 HIGH
Local 		ninjarmm ninjarmm The Agent in NinjaRMM 5.0.909 has Incorrect Access Control. CWE-863
 Incorrect Authorization 		CVE-2021-26273 2024-11-21 14:56 2021-07-7 Show GitHub Exploit DB Packet Storm
196068 5.5 MEDIUM
Local 		hpe oneview_global_dashboard A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information. HPE has provided an update to OneView Glob… NVD-CWE-noinfo
CVE-2021-26585 2024-11-21 14:56 2021-06-24 Show GitHub Exploit DB Packet Storm
196069 9.8 CRITICAL
Network 		apache nuttx Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulti… CWE-190
 Integer Overflow or Wraparound 		CVE-2021-26461 2024-11-21 14:56 2021-06-22 Show GitHub Exploit DB Packet Storm
196070 6.1 MEDIUM
Network 		zettlr zettlr No filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file. CWE-79
Cross-site Scripting 		CVE-2021-26835 2024-11-21 14:56 2021-06-18 Show GitHub Exploit DB Packet Storm