Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231081 6 警告 PHP-Fusion - PHP-Fusion 用の Members CV モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0831 2012-12-20 19:10 2009-03-5 Show GitHub Exploit DB Packet Storm
231082 7.5 危険 torben sorensen - TinX/cms の system/rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0825 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
231083 4.9 警告 slysoft - SlySoft AnyDVD などに同梱されている Elaborate Bytes ElbyCDIO.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-0824 2012-12-20 19:10 2009-03-14 Show GitHub Exploit DB Packet Storm
231084 4.3 警告 TYPO3 Association - TYPO3 の backend ユーザインタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-0816 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
231085 5 警告 TYPO3 Association - TYPO3 の class.tslib_fe.php における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2009-0815 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
231086 9.3 危険 SopCast - sopocx.ocx の SopCast SopCore ActiveX コントロールにおける任意のプログラムを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-0811 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
231087 7.5 危険 xatrix - xGuestbook の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0810 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
231088 7.5 危険 simple cmms - SimpleCMMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0808 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
231089 7.5 危険 zfeeder - zFeeder における管理アクセス権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-0807 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
231090 5.4 警告 ziproxy - Ziproxy における Flash のアクセスコントロールを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-0804 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209251 6.1 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is alway… CWE-79
Cross-site Scripting
CVE-2020-35479 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
209252 6.1 MEDIUM
Network
mediawiki
fedoraproject
mediawiki
fedora
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki … CWE-79
Cross-site Scripting
CVE-2020-35478 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
209253 5.3 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggl… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2020-35477 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
209254 7.5 HIGH
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to ch… CWE-79
Cross-site Scripting
CVE-2020-35475 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
209255 6.1 MEDIUM
Network
mediawiki
fedoraproject
mediawiki
fedora
In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that t… CWE-79
Cross-site Scripting
CVE-2020-35474 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
209256 9.8 CRITICAL
Network
spotweb_project spotweb Time-based SQL injection exists in Spotweb 1.4.9 via the query string. CWE-89
SQL Injection
CVE-2020-35545 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
209257 8.1 HIGH
Network
fasterxml
netapp
debian
oracle
jackson-databind
service_level_manager
debian_linux
webcenter_portal
application_testing_suite
banking_platform
agile_plm
sd-wan_edge
communications_services_gatekeeper
ret…
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource. CWE-502
 Deserialization of Untrusted Data
CVE-2020-35491 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
209258 8.1 HIGH
Network
fasterxml
netapp
debian
oracle
jackson-databind
service_level_manager
debian_linux
webcenter_portal
application_testing_suite
banking_platform
agile_plm
communications_services_gatekeeper
retail_merchandisi…
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource. CWE-502
 Deserialization of Untrusted Data
CVE-2020-35490 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
209259 10.0 CRITICAL
Network
rocklobster contact_form_7 The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-35489 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
209260 5.3 MEDIUM
Network
hashicorp vault HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6 and 1.6.1. NVD-CWE-noinfo
CVE-2020-35453 2024-11-21 14:27 2020-12-17 Show GitHub Exploit DB Packet Storm