Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246961 5 警告 bitmixsoft - BitmixSoft PHP-Lance におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2923 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
246962 4.3 警告 elvinbts - Elvin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2920 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
246963 3.5 注意 BoonEx - Boonex Orca におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2919 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
246964 9.3 危険 2kgames - 2K Games Vietcong の logs.dl の CNS_AddTxt 関数におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2009-2916 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
246965 7.5 危険 2fly - 2FLY Gift Delivery System の 2fly_gift.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2915 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
246966 7.5 危険 clone2009 - Ebay Clone における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2894 2012-06-26 16:10 2009-08-20 Show GitHub Exploit DB Packet Storm
246967 6.8 警告 arabless - SaphpLesson の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2883 2012-06-26 16:10 2009-08-20 Show GitHub Exploit DB Packet Storm
246968 4.3 警告 datingpro - PG MatchMaking におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2882 2012-06-26 16:10 2009-08-20 Show GitHub Exploit DB Packet Storm
246969 7.5 危険 artis.imag - Basilic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2881 2012-06-26 16:10 2009-08-20 Show GitHub Exploit DB Packet Storm
246970 7.3 危険 シスコシステムズ - Cisco Aironet Lightweight Access Point などの OTAP 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-2861 2012-06-26 16:10 2009-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218941 6.7 MEDIUM
Local 		dlink dsl-7740c_firmware D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command. CWE-78
OS Command  		CVE-2020-12774 2024-11-21 14:00 2020-07-22 Show GitHub Exploit DB Packet Storm
218942 8.8 HIGH
Network 		seczetta neprofile A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of t… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-12854 2024-11-21 14:00 2020-07-16 Show GitHub Exploit DB Packet Storm
218943 9.8 CRITICAL
Network 		inetsoftware i-net_clear_reports XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a we… CWE-611
XXE 		CVE-2020-12684 2024-11-21 14:00 2020-07-16 Show GitHub Exploit DB Packet Storm
218944 4.6 MEDIUM
Physics 		yubico libykpiv
piv_tool_manager
yubikey_smart_card_minidriver 		An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. Thi… CWE-763
 Release of Invalid Pointer or Reference 		CVE-2020-13132 2024-11-21 14:00 2020-07-10 Show GitHub Exploit DB Packet Storm
218945 4.3 MEDIUM
Physics 		yubico libykpiv
piv_tool_manager
yubikey_smart_card_minidriver 		An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. … CWE-125
Out-of-bounds Read 		CVE-2020-13131 2024-11-21 14:00 2020-07-10 Show GitHub Exploit DB Packet Storm
218946 9.8 CRITICAL
Network 		protocol gossipsub Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack. NVD-CWE-noinfo
CVE-2020-12821 2024-11-21 14:00 2020-07-8 Show GitHub Exploit DB Packet Storm
218947 7.2 HIGH
Network 		code42 code42 Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an administrator creates a local (non-SSO) user via a Code42-generated email, the… CWE-74
Injection 		CVE-2020-12736 2024-11-21 14:00 2020-07-8 Show GitHub Exploit DB Packet Storm
218948 8.8 HIGH
Network 		obdev little_snitch Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code execut… CWE-59
Link Following 		CVE-2020-13095 2024-11-21 14:00 2020-07-1 Show GitHub Exploit DB Packet Storm
218949 7.3 HIGH
Local 		boolebox boolebox BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2020-13247 2024-11-21 14:00 2020-06-25 Show GitHub Exploit DB Packet Storm
218950 5.4 MEDIUM
Network 		boolebox boolebox BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx. CWE-79
Cross-site Scripting 		CVE-2020-13248 2024-11-21 14:00 2020-06-25 Show GitHub Exploit DB Packet Storm