Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230051 6.8 警告 phpgroupware - phpGroupWare の phpgwapi /inc/class.auth_sql.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4414 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
230052 5 警告 pps.jussieu - Polipo の client.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2009-4413 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
230053 6 警告 s9y - Serendipity における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2009-4412 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
230054 3.7 注意 xfs - XFS acl の setfacl および getfacl コマンドにおける任意のファイルなど対する ACL を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4411 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
230055 4.3 警告 pyforum - PyForum および zForum の models.parser におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4408 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
230056 6.8 警告 pyforum - PyForum などにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4407 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
230057 4.3 警告 rumbacms - Rumba XML の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4403 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
230058 7.5 危険 sql-ledger - SQL-Ledger の初期設定における管理操作を実行される脆弱性 CWE-16
環境設定
CVE-2009-4402 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
230059 7.5 危険 fr.simon rundell
TYPO3 Association
- TYPO3 用の Portsmouth Resources Database エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4396 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
230060 7.5 危険 TYPO3 Association - TYPO3 用の XDS Staff List エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4392 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214851 7.8 HIGH
Local
sam2p_project sam2p There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. NVD-CWE-noinfo
CVE-2020-19492 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
214852 7.8 HIGH
Local
sam2p_project sam2p There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. CWE-787
 Out-of-bounds Write
CVE-2020-19491 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
214853 5.5 MEDIUM
Local
tinyexr_project tinyexr tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. CWE-190
 Integer Overflow or Wraparound
CVE-2020-19490 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
214854 5.5 MEDIUM
Local
gpac gpac An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read. CWE-476
 NULL Pointer Dereference
CVE-2020-19488 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
214855 5.5 MEDIUM
Local
gpac gpac An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a cra… CWE-125
Out-of-bounds Read
CVE-2020-19481 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
214856 5.5 MEDIUM
Local
flowpaper pdf2json An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 . CWE-787
 Out-of-bounds Write
CVE-2020-19475 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
214857 5.5 MEDIUM
Local
flowpaper pdf2json An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free . CWE-416
 Use After Free
CVE-2020-19474 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
214858 5.5 MEDIUM
Local
flowpaper pdf2json An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception. CWE-755
 Improper Handling of Exceptional Conditions
CVE-2020-19473 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
214859 5.5 MEDIUM
Local
flowpaper pdf2json An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2 . CWE-125
Out-of-bounds Read
CVE-2020-19472 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
214860 5.5 MEDIUM
Local
flowpaper pdf2json An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 . CWE-125
Out-of-bounds Read
CVE-2020-19471 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm