Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231901 4.3 警告 Scriptsez.net - Scriptsez Ultimate Poll の demo_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3601 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
231902 7.5 危険 vspanel - VS PANEL の results.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3595 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
231903 4.3 警告 qtmsoft - Qualiteam X-Cart の customer/home.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3592 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
231904 7.5 危険 vspanel - VS PANEL の showcat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3590 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
231905 5 警告 sql-ledger - SQL-Ledger におけるクッキーをキャプチャされる脆弱性 CWE-16
環境設定 		CVE-2009-3584 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
231906 5.1 警告 sql-ledger - SQL-Ledger の Preferences メニュー項目におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3583 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
231907 6.5 警告 sql-ledger - SQL-Ledger の delete サブルーチンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3582 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
231908 3.5 注意 sql-ledger - SQL-Ledger におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3581 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
231909 6.8 警告 sql-ledger - SQL-Ledger の am.pl におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-3580 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
231910 10 危険 tatsuhiro tsujikawa - aria の DHTRoutingTableDeserializer.cc におけるバッファオーバーフローの脆弱性 CWE-noinfo
情報不足 		CVE-2009-3575 2012-12-20 19:28 2009-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197641 6.5 MEDIUM
Network 		hongdian h8922_firmware Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file… CWE-22
Path Traversal 		CVE-2021-28149 2024-11-21 14:59 2021-05-7 Show GitHub Exploit DB Packet Storm
197642 8.1 HIGH
Network 		strapi strapi In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gains access to a valid session can use this to take over an … CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2021-28128 2024-11-21 14:59 2021-05-6 Show GitHub Exploit DB Packet Storm
197643 6.1 MEDIUM
Network 		apache airflow The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and… CWE-79
Cross-site Scripting 		CVE-2021-28359 2024-11-21 14:59 2021-05-2 Show GitHub Exploit DB Packet Storm
197644 6.1 MEDIUM
Network 		php-fusion phpfusion CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-28280 2024-11-21 14:59 2021-04-30 Show GitHub Exploit DB Packet Storm
197645 8.8 HIGH
Network 		soyal 701client Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2021-28269 2024-11-21 14:59 2021-04-28 Show GitHub Exploit DB Packet Storm
197646 8.8 HIGH
Network 		soyal 701server
701clientsql
701serversql 		Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulne… CWE-276
Incorrect Default Permissions  		CVE-2021-28271 2024-11-21 14:59 2021-04-27 Show GitHub Exploit DB Packet Storm
197647 6.1 MEDIUM
Network 		apache superset Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allo… CWE-601
Open Redirect 		CVE-2021-28125 2024-11-21 14:59 2021-04-27 Show GitHub Exploit DB Packet Storm
197648 5.3 MEDIUM
Network 		orangehrm orangehrm OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function. NVD-CWE-noinfo
CVE-2021-28399 2024-11-21 14:59 2021-04-26 Show GitHub Exploit DB Packet Storm
197649 6.1 MEDIUM
Network 		jamovi jamovi Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv (Jamovi) document containing a… CWE-79
Cross-site Scripting 		CVE-2021-28079 2024-11-21 14:59 2021-04-26 Show GitHub Exploit DB Packet Storm
197650 6.5 MEDIUM
Network 		eclipse openj9 In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static me… CWE-909
 Missing Initialization of Resource 		CVE-2021-28167 2024-11-21 14:59 2021-04-22 Show GitHub Exploit DB Packet Storm