Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230991 6.8 警告 rich white - School Data Navigator の app_and_readme/navigator/index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2641 2012-12-20 19:10 2009-07-28 Show GitHub Exploit DB Packet Storm
230992 7.5 危険 prosmdr - ProSMDR の login.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2612 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
230993 3.5 注意 scott courtney - Drupal 用の Links Package モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2610 2012-12-20 19:10 2009-06-25 Show GitHub Exploit DB Packet Storm
230994 7.5 危険 pinme - Joomla! 用の com_pinboard コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2607 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
230995 6.8 警告 traidnt - Traidnt Up の adminquery.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2605 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
230996 7.5 危険 zenhelpdesk - Zen Help Desk の adminlogin.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2604 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
230997 5 警告 r2newsletter - R2 Newsletter におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2602 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
230998 7.5 危険 radscripts - RadCLASSIFIEDS Gold の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2599 2012-12-20 19:10 2009-07-27 Show GitHub Exploit DB Packet Storm
230999 7.8 危険 サン・マイクロシステムズ - Web Proxy Server 用の SJS Access Manager Policy Agent モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2597 2012-12-20 19:10 2009-07-23 Show GitHub Exploit DB Packet Storm
231000 7.5 危険 phpjunkyard - PHPJunkYard GBook の guestbook.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2592 2012-12-20 19:10 2009-07-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197111 3.3 LOW
Local 		samsung penup Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview. NVD-CWE-Other
CVE-2021-25463 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197112 5.5 MEDIUM
Local 		google android NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption. CWE-476
 NULL Pointer Dereference 		CVE-2021-25462 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197113 7.8 HIGH
Local 		google android An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow. CWE-787
 Out-of-bounds Write 		CVE-2021-25461 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197114 5.5 MEDIUM
Local 		google android An improper access control vulnerability in sspExit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to terminate BlockchainTZService. NVD-CWE-Other
CVE-2021-25460 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197115 5.5 MEDIUM
Local 		google android An improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to start BlockchainTZService. NVD-CWE-Other
CVE-2021-25459 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197116 5.5 MEDIUM
Local 		google android NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption. CWE-476
 NULL Pointer Dereference 		CVE-2021-25458 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197117 3.3 LOW
Local 		google android An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information. CWE-20
 Improper Input Validation  		CVE-2021-25457 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197118 5.5 MEDIUM
Local 		google android OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file. CWE-125
Out-of-bounds Read 		CVE-2021-25456 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197119 3.3 LOW
Local 		google android OOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to access arbitrary address through pointer via forged avi file. CWE-125
Out-of-bounds Read 		CVE-2021-25455 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197120 5.5 MEDIUM
Local 		google android OOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute remote DoS via forged aac file. CWE-125
Out-of-bounds Read 		CVE-2021-25454 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm