Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231161 9.3 危険 pinnaclesys - Pinnacle Systems Pinnacle Studio の Pinnacle Hollywood Effects モジュールの InstallHFZ.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1743 2012-12-20 19:10 2009-05-20 Show GitHub Exploit DB Packet Storm
231162 7.5 危険 phpeasycode - PAD Site Scripts における管理者権限を含む他のユーザとして権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1739 2012-12-20 19:10 2009-05-20 Show GitHub Exploit DB Packet Storm
231163 6.8 警告 richard ellerbrock - IPplan におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-1733 2012-12-20 19:10 2009-05-20 Show GitHub Exploit DB Packet Storm
231164 4.3 警告 richard ellerbrock - IPplan の admin/usermanager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1732 2012-12-20 19:10 2009-05-20 Show GitHub Exploit DB Packet Storm
231165 4.3 警告 サン・マイクロシステムズ - Sun Java System Communications Express におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1729 2012-12-20 19:10 2009-05-20 Show GitHub Exploit DB Packet Storm
231166 9.3 危険 サン・マイクロシステムズ - Sun Java SE Runtime Environment の deploytk.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-1672 2012-12-20 19:10 2009-05-18 Show GitHub Exploit DB Packet Storm
231167 9.3 危険 サン・マイクロシステムズ - Sun Java SE Runtime Environment の deploytk.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1671 2012-12-20 19:10 2009-05-18 Show GitHub Exploit DB Packet Storm
231168 7.5 危険 tcpdb - TCPDB の user/index.php における admin アカウントを追加される脆弱性 CWE-287
不適切な認証 		CVE-2009-1670 2012-12-20 19:10 2009-05-18 Show GitHub Exploit DB Packet Storm
231169 10 危険 Smarty - Smarty の libs/plugins/function.math.php における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1669 2012-12-20 19:10 2009-05-18 Show GitHub Exploit DB Packet Storm
231170 4 警告 TYPSoft - TYPSoft FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1668 2012-12-20 19:10 2009-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209421 9.8 CRITICAL
Network 		sqlite
netapp 		sqlite
ontap_select_deploy_administration_utility 		In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. - CVE-2020-35527 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
209422 7.5 HIGH
Network 		sqlite sqlite In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. CWE-476
 NULL Pointer Dereference 		CVE-2020-35525 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
209423 5.5 MEDIUM
Local 		libjpeg-turbo libjpeg-turbo A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. CWE-476
 NULL Pointer Dereference 		CVE-2020-35538 2024-11-21 14:27 2022-09-1 Show GitHub Exploit DB Packet Storm
209424 7.8 HIGH
Local 		libpng
debian 		pngcheck
debian_linux 		A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. - CVE-2020-35511 2024-11-21 14:27 2022-08-24 Show GitHub Exploit DB Packet Storm
209425 5.4 MEDIUM
Network 		redhat keycloak A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest th… CWE-295
Improper Certificate Validation  		CVE-2020-35509 2024-11-21 14:27 2022-08-24 Show GitHub Exploit DB Packet Storm
209426 6.1 MEDIUM
Network 		gollum_project gollum Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog. CWE-79
Cross-site Scripting 		CVE-2020-35305 2024-11-21 14:27 2022-07-15 Show GitHub Exploit DB Packet Storm
209427 5.4 MEDIUM
Network 		multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaurant Name field to /dashboard/profile.php. CWE-79
Cross-site Scripting 		CVE-2020-35261 2024-11-21 14:27 2022-07-15 Show GitHub Exploit DB Packet Storm
209428 8.8 HIGH
Network 		victor_cms_project victor_cms Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_u… CWE-89
SQL Injection 		CVE-2020-35597 2024-11-21 14:27 2022-06-17 Show GitHub Exploit DB Packet Storm
209429 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-35632 2024-11-21 14:27 2022-04-19 Show GitHub Exploit DB Packet Storm
209430 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-35631 2024-11-21 14:27 2022-04-19 Show GitHub Exploit DB Packet Storm