Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230721 7.5 危険 Virtue Netz - Virtue Shopping Mall の products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2016 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
230722 1.9 注意 サン・マイクロシステムズ - Sun OpenSolaris の idmap におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2012 2012-12-20 19:10 2009-06-4 Show GitHub Exploit DB Packet Storm
230723 4.4 警告 Debian
Xfig project		 - Xfig における任意のファイルを読み取られる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-1962 2012-12-20 19:10 2009-06-7 Show GitHub Exploit DB Packet Storm
230724 5 警告 strongSwan - strongSWAN の charon デーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1958 2012-12-20 19:10 2009-06-7 Show GitHub Exploit DB Packet Storm
230725 5 警告 strongSwan - strongSWAN の charon デーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1957 2012-12-20 19:10 2009-06-7 Show GitHub Exploit DB Packet Storm
230726 6.8 警告 propertymaxpro - PropertyMax Pro FREE の管理ログイン機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1952 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
230727 4.3 警告 propertymaxpro - PropertyMax Pro FREE の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1951 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
230728 7.8 危険 unclassified - UNB の import_wbb1.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-1949 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
230729 5.1 警告 unclassified - UNB の forum.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1948 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
230730 7.5 危険 tzo - WebCal の webCal3_detail.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1945 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209091 4.9 MEDIUM
Network 		bloofox bloofoxcms bloofoxCMS 0.5.2.1 allows admins to upload arbitrary .php files (with "Content-Type: application/octet-stream") to ../media/images/ via the admin/index.php?mode=tools&page=upload URI, aka directory t… CWE-22
Path Traversal 		CVE-2020-35709 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
209092 7.2 HIGH
Network 		phplist phplist phpList 3.5.9 allows SQL injection by admins who provide a crafted fourth line of a file to the "Config - Import Administrators" page. CWE-89
SQL Injection 		CVE-2020-35708 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
209093 5.4 MEDIUM
Network 		daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen. CWE-79
Cross-site Scripting 		CVE-2020-35707 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
209094 5.4 MEDIUM
Network 		daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen. CWE-79
Cross-site Scripting 		CVE-2020-35706 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
209095 5.4 MEDIUM
Network 		daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen. CWE-79
Cross-site Scripting 		CVE-2020-35705 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
209096 5.4 MEDIUM
Network 		daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen. CWE-79
Cross-site Scripting 		CVE-2020-35704 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
209097 7.8 HIGH
Local 		freedesktop poppler DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones … CWE-787
 Out-of-bounds Write 		CVE-2020-35702 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
209098 8.8 HIGH
Adjacent 		google android On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently with a vulnerable target device, without… NVD-CWE-noinfo
CVE-2020-35693 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
209099 7.5 HIGH
Network 		opensmtpd
fedoraproject 		opensmtpd
fedora 		smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted pattern of cl… CWE-476
 NULL Pointer Dereference 		CVE-2020-35680 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
209100 7.5 HIGH
Network 		opensmtpd
fedoraproject 		opensmtpd
fedora 		smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-35679 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm