Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230991	6.8	警告	rich white	-	School Data Navigator の app_and_readme/navigator/index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-2641	2012-12-20 19:10	2009-07-28	Show	GitHub Exploit DB Packet Storm

230992	7.5	危険	prosmdr	-	ProSMDR の login.aspx における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2612	2012-12-20 19:10	2009-07-27	Show	GitHub Exploit DB Packet Storm

230993	3.5	注意	scott courtney	-	Drupal 用の Links Package モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2610	2012-12-20 19:10	2009-06-25	Show	GitHub Exploit DB Packet Storm

230994	7.5	危険	pinme	-	Joomla! 用の com_pinboard コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2607	2012-12-20 19:10	2009-07-27	Show	GitHub Exploit DB Packet Storm

230995	6.8	警告	traidnt	-	Traidnt Up の adminquery.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2605	2012-12-20 19:10	2009-07-27	Show	GitHub Exploit DB Packet Storm

230996	7.5	危険	zenhelpdesk	-	Zen Help Desk の adminlogin.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2604	2012-12-20 19:10	2009-07-27	Show	GitHub Exploit DB Packet Storm

230997	5	警告	r2newsletter	-	R2 Newsletter におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2602	2012-12-20 19:10	2009-07-27	Show	GitHub Exploit DB Packet Storm

230998	7.5	危険	radscripts	-	RadCLASSIFIEDS Gold の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2599	2012-12-20 19:10	2009-07-27	Show	GitHub Exploit DB Packet Storm

230999	7.8	危険	サン・マイクロシステムズ	-	Web Proxy Server 用の SJS Access Manager Policy Agent モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2597	2012-12-20 19:10	2009-07-23	Show	GitHub Exploit DB Packet Storm

231000	7.5	危険	phpjunkyard	-	PHPJunkYard GBook の guestbook.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2592	2012-12-20 19:10	2009-07-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223521	5.4	MEDIUM Network	online_store_system_project	online_store_system	Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.	CWE-79 Cross-site Scripting	CVE-2019-8288	2024-11-21 13:49	2019-10-2	Show	GitHub Exploit DB Packet Storm

223522	7.5	HIGH Network	adobe google debian fedoraproject	flash_player_desktop_runtime flash_player chrome debian_linux fedora	Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current u…	NVD-CWE-noinfo	CVE-2019-8075	2024-11-21 13:49	2019-09-28	Show	GitHub Exploit DB Packet Storm

223523	9.8	CRITICAL Network	adobe	coldfusion	ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability. Successful exploitation could lead to Access Control Bypass in the context of the…	CWE-22 Path Traversal	CVE-2019-8074	2024-11-21 13:49	2019-09-28	Show	GitHub Exploit DB Packet Storm

223524	9.8	CRITICAL Network	adobe	coldfusion	ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Command Injection via Vulnerable component vulnerability. Successful exploitation could lead to Arbitrary code …	CWE-77 Command Injection	CVE-2019-8073	2024-11-21 13:49	2019-09-28	Show	GitHub Exploit DB Packet Storm

223525	7.5	HIGH Network	adobe	coldfusion	ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of t…	NVD-CWE-noinfo	CVE-2019-8072	2024-11-21 13:49	2019-09-28	Show	GitHub Exploit DB Packet Storm

223526	6.1	MEDIUM Network	open-emr	openemr	OpenEMR v5.0.1-6 allows XSS.	CWE-79 Cross-site Scripting	CVE-2019-8368	2024-11-21 13:49	2019-09-17	Show	GitHub Exploit DB Packet Storm

223527	7.2	HIGH Network	open-emr	openemr	OpenEMR v5.0.1-6 allows code execution.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-8371	2024-11-21 13:49	2019-09-17	Show	GitHub Exploit DB Packet Storm

223528	7.8	HIGH Local	adobe	application_manager	Adobe application manager installer version 10.0 have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the c…	CWE-427 Uncontrolled Search Path Element	CVE-2019-8076	2024-11-21 13:49	2019-09-13	Show	GitHub Exploit DB Packet Storm

223529	9.8	CRITICAL Network	adobe	flash_player_desktop_runtime flash_player	Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context …	CWE-416 Use After Free	CVE-2019-8070	2024-11-21 13:49	2019-09-13	Show	GitHub Exploit DB Packet Storm

223530	9.8	CRITICAL Network	adobe	flash_player_desktop_runtime flash_player	Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method Execution vulnerability. Successful exploitation could lead to Arbitrary Code Execution i…	CWE-346 Origin Validation Error	CVE-2019-8069	2024-11-21 13:49	2019-09-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed