Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230721 7.5 危険 phpscriptsnow - PHP Scripts Now President Bios の bios.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2886 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
230722 7.5 危険 phpscriptsnow - PHP Scripts Now World's Tallest Buildings の bios.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2885 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
230723 4.3 警告 phpscriptsnow - PHP Scripts Now World's Tallest Buildings の bios.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2884 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
230724 3.5 注意 サン・マイクロシステムズ - Sun VDI における VDI 設定データを平文で読まれる脆弱性 CWE-200
情報漏えい
CVE-2009-2856 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
230725 6.4 警告 WordPress.org - Wordpress における許可されていない編集などをされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2854 2012-12-20 19:10 2009-08-3 Show GitHub Exploit DB Packet Storm
230726 10 危険 WordPress.org - Wordpress における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2853 2012-12-20 19:10 2009-08-3 Show GitHub Exploit DB Packet Storm
230727 6.8 警告 ryan.mcgeary - Wordpress 用の WP-Syntax プラグインにおける任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2009-2852 2012-12-20 19:10 2009-08-18 Show GitHub Exploit DB Packet Storm
230728 4.3 警告 WordPress.org - WordPress の管理者インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2851 2012-12-20 19:10 2009-07-20 Show GitHub Exploit DB Packet Storm
230729 7.5 危険 webdynamite - WebDynamite ProjectButler の pda_projects.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-2791 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
230730 7.5 危険 softbiz - SoftBiz Dating Script の cat_products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2790 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202041 3.3 LOW
Local
google android In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inf… CWE-203
 Information Exposure Through Discrepancy
CVE-2021-0988 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
202042 3.3 LOW
Local
google android In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This … CWE-203
 Information Exposure Through Discrepancy
CVE-2021-0987 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
202043 5.5 MEDIUM
Local
google android In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could … CWE-862
 Missing Authorization
CVE-2021-0986 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
202044 7.8 HIGH
Local
google android In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check. This could lead to local escalation of privilege with no additional execution p… CWE-862
 Missing Authorization
CVE-2021-0985 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
202045 7.8 HIGH
Local
google android In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional execution pr… CWE-404
 Improper Resource Shutdown or Release
CVE-2021-0984 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
202046 3.3 LOW
Local
google android In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of information about installed device/profile owner package name due to side channel information disclos… CWE-200
Information Exposure
CVE-2021-0983 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
202047 3.3 LOW
Local
google android In getOrganizationNameForUser of DevicePolicyManagerService.java, there is a possible organization name disclosure due to a missing permission check. This could lead to local information disclosure w… CWE-862
 Missing Authorization
CVE-2021-0982 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
202048 7.8 HIGH
Local
google android In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a foreground service without showing a notification due to improper input validation. This could lead… NVD-CWE-Other
CVE-2021-0981 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
202049 5.5 MEDIUM
Local
google android In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions b… CWE-276
Incorrect Default Permissions 
CVE-2021-0979 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
202050 3.3 LOW
Local
google android In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.… CWE-862
 Missing Authorization
CVE-2021-0978 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm