Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246181 7.5 危険 f-cimag-in
Joomla!		 - Joomla! 用 BookFlip コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2390 2012-06-26 16:10 2009-07-9 Show GitHub Exploit DB Packet Storm
246182 9.3 危険 awingsoft - Awingsoft Awakening Winds3D Viewer プラグインにおける任意のファイルをダウンロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2386 2012-06-26 16:10 2009-07-10 Show GitHub Exploit DB Packet Storm
246183 7.5 危険 Simple Machines
fustrate		 - SMF 用 Member Awards コンポーネントの awardsMembers 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2385 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
246184 7.5 危険 blogtrafficexchange
WordPress.org		 - WordPress 用の Related Sites プラグインの BTE_RW_Webajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2383 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
246185 5 警告 gizmo5 - Linux 上の Gizmo における任意のユーザの資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2381 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
246186 4.3 警告 4homepages - 4images の includes/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2380 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
246187 6.8 警告 BIGACE - BIGACE Web CMS の public/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2379 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
246188 4.3 警告 avax-software - AVAX-software Avax Vector ActiveX の Avax Vector ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2377 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
246189 7.5 危険 datachecknh - DataCheck Solutions ForumPal FE および ForumPal の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2366 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
246190 7.5 危険 datachecknh - DataCheck Solutions GalleryPal FE の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2365 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220831 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10499 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
220832 6.5 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10498 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
220833 6.5 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10497 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
220834 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10496 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
220835 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10495 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
220836 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10494 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
220837 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10493 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
220838 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10492 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
220839 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10491 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
220840 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10490 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm