Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231281 9.3 危険 randomsoftware - Icarus におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1071 2012-12-20 19:10 2009-03-26 Show GitHub Exploit DB Packet Storm
231282 9.3 危険 powerzip - Trident PowerZip におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1059 2012-12-20 19:10 2009-03-24 Show GitHub Exploit DB Packet Storm
231283 10 危険 zipgenius - ZipGenius におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1058 2012-12-20 19:10 2009-03-24 Show GitHub Exploit DB Packet Storm
231284 4 警告 Sitecore - Sitecore CMS の Web サービスにおけるセキュリティデータベースへのアクセス権を取得される脆弱性 CWE-Other
その他 		CVE-2009-1055 2012-12-20 19:10 2009-03-24 Show GitHub Exploit DB Packet Storm
231285 10 危険 snom - snom VoIP phones snom 300 などの Web インターフェースにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1048 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
231286 9.3 危険 winasm - WinAsm Studio におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1040 2012-12-20 19:10 2009-03-20 Show GitHub Exploit DB Packet Storm
231287 6.5 警告 yap - YAP Blog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1038 2012-12-20 19:10 2009-03-20 Show GitHub Exploit DB Packet Storm
231288 7.5 危険 YABSoft - YABSoft AIH Script の gallery_list.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1032 2012-12-20 19:10 2009-03-20 Show GitHub Exploit DB Packet Storm
231289 7.8 危険 Rhino Software - Rhino Software Serv-U File Server の FTP サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1031 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
231290 9.3 危険 poppeeper - POP Peeper におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1029 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209411 9.8 CRITICAL
Network 		inxedu inxedu SQL Injection vulnerability in file /inxedu/demo_inxedu_open/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu 2.0.6 via the id value. CWE-89
SQL Injection 		CVE-2020-35326 2024-11-21 14:27 2023-01-19 Show GitHub Exploit DB Packet Storm
209412 4.3 MEDIUM
Adjacent 		bluetooth bluetooth_core_specification An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in Bluetooth Core Specificati… CWE-203
CWE-294
 Information Exposure Through Discrepancy
Authentication Bypass by Capture-replay  		CVE-2020-35473 2024-11-21 14:27 2022-11-8 Show GitHub Exploit DB Packet Storm
209413 8.8 HIGH
Network 		bigprof online_invoicing_system BigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to move the records of members across groups. The applicable endpoint (admin/pageTransferOwnership.php) … CWE-352
 Origin Validation Error 		CVE-2020-35675 2024-11-21 14:27 2022-09-29 Show GitHub Exploit DB Packet Storm
209414 9.8 CRITICAL
Network 		bigprof online_invoicing_system BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordReset.php (the endpoint that is responsible for issuing self-service password res… CWE-89
SQL Injection 		CVE-2020-35674 2024-11-21 14:27 2022-09-29 Show GitHub Exploit DB Packet Storm
209415 5.5 MEDIUM
Local 		libraw libraw In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files. CWE-125
Out-of-bounds Read 		CVE-2020-35535 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
209416 5.5 MEDIUM
Local 		libraw libraw In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-35534 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
209417 5.5 MEDIUM
Local 		libraw
debian 		libraw
debian_linux 		In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file. CWE-125
Out-of-bounds Read 		CVE-2020-35533 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
209418 5.5 MEDIUM
Local 		libraw
debian 		libraw
debian_linux 		In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride fiel… CWE-125
Out-of-bounds Read 		CVE-2020-35532 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
209419 5.5 MEDIUM
Local 		libraw
debian 		libraw
debian_linux 		In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file. CWE-125
Out-of-bounds Read 		CVE-2020-35531 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
209420 5.5 MEDIUM
Local 		libraw
debian 		libraw
debian_linux 		In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file. CWE-787
 Out-of-bounds Write 		CVE-2020-35530 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm