Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230421 6.5 警告 TestLink Development Team - TestLink における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4238 2012-12-20 19:28 2009-12-10 Show GitHub Exploit DB Packet Storm
230422 3.5 注意 TestLink Development Team - TestLink におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4237 2012-12-20 19:28 2009-12-10 Show GitHub Exploit DB Packet Storm
230423 4.3 警告 youjoomla - YJ Whois コンポーネントの modules/mod_yj_whois.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4233 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
230424 7.5 危険 ruven pillay - IIPImage Server の FastCGI プログラムにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4230 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
230425 4.3 警告 Xfig project - Xfig の u_bound.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-4228 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
230426 6.8 警告 Xfig project - Xfig の f_readold.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4227 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
230427 7.1 危険 サン・マイクロシステムズ - Sun OpenSolaris のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2009-4226 2012-12-20 19:28 2009-12-3 Show GitHub Exploit DB Packet Storm
230428 7.5 危険 smartisoft - phpBazar における管理コントロールパネルへのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4222 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
230429 7.5 危険 smartisoft - phpBazar の classified.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4221 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
230430 7.5 危険 raphael mazoyer - PointComma の includes/classes/pctemplate.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-4220 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196181 7.8 HIGH
Local
amd enterprise_driver
radeon_pro_software
radeon_software
radeon_rx_vega_56_firmware
radeon_rx_vega_64_firmware
ryzen_3_5300ge_firmware
ryzen_3_5300g_firmware
ryzen_5_5600ge_firmware…
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel. NVD-CWE-noinfo
CVE-2021-26391 2024-11-21 14:56 2022-11-10 Show GitHub Exploit DB Packet Storm
196182 7.5 HIGH
Network
lannerinc iac-ast2500a_firmware A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service (DoS) c… NVD-CWE-Other
CVE-2021-26733 2024-11-21 14:56 2022-10-24 Show GitHub Exploit DB Packet Storm
196183 5.3 MEDIUM
Network
lannerinc iac-ast2500a_firmware A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration of the BMC. This issue affects: Lanner I… NVD-CWE-Other
CVE-2021-26732 2024-11-21 14:56 2022-10-24 Show GitHub Exploit DB Packet Storm
196184 9.8 CRITICAL
Network
lannerinc iac-ast2500a_firmware Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an authenticated attacker to execute arbitrary code with the same… CWE-77
CWE-787
Command Injection
 Out-of-bounds Write
CVE-2021-26731 2024-11-21 14:56 2022-10-24 Show GitHub Exploit DB Packet Storm
196185 9.8 CRITICAL
Network
lannerinc iac-ast2500a_firmware A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server … CWE-787
 Out-of-bounds Write
CVE-2021-26730 2024-11-21 14:56 2022-10-24 Show GitHub Exploit DB Packet Storm
196186 9.8 CRITICAL
Network
lannerinc iac-ast2500a_firmware Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges … CWE-77
CWE-787
Command Injection
 Out-of-bounds Write
CVE-2021-26729 2024-11-21 14:56 2022-10-24 Show GitHub Exploit DB Packet Storm
196187 9.8 CRITICAL
Network
lannerinc iac-ast2500a_firmware Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server… CWE-77
CWE-787
Command Injection
 Out-of-bounds Write
CVE-2021-26728 2024-11-21 14:56 2022-10-24 Show GitHub Exploit DB Packet Storm
196188 9.8 CRITICAL
Network
lannerinc iac-ast2500a_firmware Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privilege… CWE-77
CWE-787
Command Injection
 Out-of-bounds Write
CVE-2021-26727 2024-11-21 14:56 2022-10-24 Show GitHub Exploit DB Packet Storm
196189 7.5 HIGH
Network
wisa smart_wing_cms This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server witho… CWE-20
CWE-494
 Improper Input Validation 
 Download of Code Without Integrity Check
CVE-2021-26639 2024-11-21 14:56 2022-08-18 Show GitHub Exploit DB Packet Storm
196190 7.8 HIGH
Local
amd ryzen_7_5700g_firmware
ryzen_7_5700ge_firmware
ryzen_5_5600g_firmware
ryzen_5_5600ge_firmware
ryzen_3_5300g_firmware
ryzen_3_5300ge_firmware
ryzen_9_5980hx_firmware
ryzen_9_5980h…
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2021-26384 2024-11-21 14:56 2022-07-15 Show GitHub Exploit DB Packet Storm