Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231121 7.5 危険 Virtue Netz - Virtue Book Store の products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2017 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
231122 7.5 危険 Virtue Netz - Virtue Shopping Mall の products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2016 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
231123 1.9 注意 サン・マイクロシステムズ - Sun OpenSolaris の idmap におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2012 2012-12-20 19:10 2009-06-4 Show GitHub Exploit DB Packet Storm
231124 4.4 警告 Debian
Xfig project		 - Xfig における任意のファイルを読み取られる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-1962 2012-12-20 19:10 2009-06-7 Show GitHub Exploit DB Packet Storm
231125 5 警告 strongSwan - strongSWAN の charon デーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1958 2012-12-20 19:10 2009-06-7 Show GitHub Exploit DB Packet Storm
231126 5 警告 strongSwan - strongSWAN の charon デーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1957 2012-12-20 19:10 2009-06-7 Show GitHub Exploit DB Packet Storm
231127 6.8 警告 propertymaxpro - PropertyMax Pro FREE の管理ログイン機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1952 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
231128 4.3 警告 propertymaxpro - PropertyMax Pro FREE の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1951 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
231129 7.8 危険 unclassified - UNB の import_wbb1.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-1949 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
231130 5.1 警告 unclassified - UNB の forum.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1948 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209131 6.5 MEDIUM
Network 		bloofox bloofoxcms BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as demonstrated by use of 'mode=settings&page=editor' to change any file content (Locally/Remotely). CWE-352
 Origin Validation Error 		CVE-2020-36140 2024-11-21 14:28 2021-06-5 Show GitHub Exploit DB Packet Storm
209132 5.4 MEDIUM
Network 		bloofox bloofoxcms BloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnerability by inserting a XSS payload within the 'fileurl' parameter. CWE-79
Cross-site Scripting 		CVE-2020-36139 2024-11-21 14:28 2021-06-5 Show GitHub Exploit DB Packet Storm
209133 7.5 HIGH
Network 		obottle_project obottle OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability. NVD-CWE-noinfo
CVE-2020-36009 2024-11-21 14:28 2021-06-4 Show GitHub Exploit DB Packet Storm
209134 8.1 HIGH
Network 		obottle_project obottle OBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability. NVD-CWE-noinfo
CVE-2020-36008 2024-11-21 14:28 2021-06-4 Show GitHub Exploit DB Packet Storm
209135 6.1 MEDIUM
Network 		appcms appcms AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users. CWE-79
Cross-site Scripting 		CVE-2020-36007 2024-11-21 14:28 2021-06-4 Show GitHub Exploit DB Packet Storm
209136 6.5 MEDIUM
Network 		appcms appcms AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site. NVD-CWE-noinfo
CVE-2020-36006 2024-11-21 14:28 2021-06-4 Show GitHub Exploit DB Packet Storm
209137 6.5 MEDIUM
Network 		appcms appcms AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site. NVD-CWE-noinfo
CVE-2020-36005 2024-11-21 14:28 2021-06-4 Show GitHub Exploit DB Packet Storm
209138 6.5 MEDIUM
Network 		appcms appcms AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information. CWE-89
SQL Injection 		CVE-2020-36004 2024-11-21 14:28 2021-06-4 Show GitHub Exploit DB Packet Storm
209139 5.4 MEDIUM
Network 		zzcms zzcms An issue was discovered in zzcms2020. There is a XSS vulnerability that can insert and execute JS code arbitrarily via /user/manage.php. CWE-79
Cross-site Scripting 		CVE-2020-35973 2024-11-21 14:28 2021-06-4 Show GitHub Exploit DB Packet Storm
209140 4.3 MEDIUM
Network 		yzmcms yzmcms An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html. CWE-352
 Origin Validation Error 		CVE-2020-35972 2024-11-21 14:28 2021-06-4 Show GitHub Exploit DB Packet Storm