Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
247261	4.3	警告	edgephp	-	EZodiak の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4684	2012-06-26 16:19	2010-03-10	Show	GitHub Exploit DB Packet Storm

247262	4.3	警告	frank-karau	-	phpFK PHP Forum ohne の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4677	2012-06-26 16:19	2010-03-8	Show	GitHub Exploit DB Packet Storm

247263	9.3	危険	JetAudio	-	jetAudio の JetCast.exe におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4676	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

247264	7.5	危険	WordPress.org grupenet	-	WordPress 用 WP-Lytebox プラグインの main.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4672	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

247265	7.5	危険	beaussier	-	RoomPHPlanning の Login.php における管理アクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2009-4671	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

247266	7.5	危険	beaussier	-	RoomPHPlanning の admin/delitem.php における任意のルームを削除される脆弱性	CWE-287 不適切な認証	CVE-2009-4670	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

247267	7.5	危険	beaussier	-	RoomPHPlanning における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4669	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

247268	9.3	危険	JetAudio	-	jetAudio の JetCast.exe におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4668	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

247269	5	警告	CuteSoft Components	-	ASP.NET 用の CuteSoft Components Cute Editor におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4665	2012-06-26 16:19	2010-03-5	Show	GitHub Exploit DB Packet Storm

247270	3.3	注意	Linux fwbuilder	-	Firewall Builder における権限を取得される脆弱性	CWE-59 リンク解釈の問題	CVE-2009-4664	2012-06-26 16:19	2010-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219051	6.1	MEDIUM Network	kitodo	kitodo.presentation	The dlf (aka Kitodo.Presentation) extension before 3.1.2 for TYPO3 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-16095	2024-11-21 14:06	2020-07-30	Show	GitHub Exploit DB Packet Storm

219052	7.5	HIGH Network	claws-mail fedoraproject	claws-mail fedora	In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.	CWE-674 Uncontrolled Recursion	CVE-2020-16094	2024-11-21 14:06	2020-07-29	Show	GitHub Exploit DB Packet Storm

219053	7.5	HIGH Network	grin	grin	Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.	CWE-345 Insufficient Verification of Data Authenticity	CVE-2020-15899	2024-11-21 14:06	2020-07-29	Show	GitHub Exploit DB Packet Storm

219054	9.8	CRITICAL Network	artifex canonical opensuse	ghostscript ubuntu_linux leap	A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'po…	CWE-787 CWE-191 Out-of-bounds Write Integer Underflow (Wrap or Wraparound)	CVE-2020-15900	2024-11-21 14:06	2020-07-29	Show	GitHub Exploit DB Packet Storm

219055	5.3	MEDIUM Local	qemu debian canonical	qemu debian_linux ubuntu_linux	hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest …	CWE-787 Out-of-bounds Write	CVE-2020-15863	2024-11-21 14:06	2020-07-29	Show	GitHub Exploit DB Packet Storm

219056	9.9	CRITICAL Network	rconfig	rconfig	rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability usin…	NVD-CWE-noinfo	CVE-2020-15715	2024-11-21 14:06	2020-07-28	Show	GitHub Exploit DB Packet Storm

219057	8.8	HIGH Network	rconfig	rconfig	rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php script using the custom_Location parameter, which could allow t…	CWE-89 SQL Injection	CVE-2020-15714	2024-11-21 14:06	2020-07-28	Show	GitHub Exploit DB Packet Storm

219058	8.8	HIGH Network	rconfig	rconfig	rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy parameter, which could allow the attacker to…	CWE-89 SQL Injection	CVE-2020-15713	2024-11-21 14:06	2020-07-28	Show	GitHub Exploit DB Packet Storm

219059	4.3	MEDIUM Network	rconfig	rconfig	rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a crafted request to the ajaxGetFileByPath.php script containing hexadecimal en…	CWE-22 Path Traversal	CVE-2020-15712	2024-11-21 14:06	2020-07-28	Show	GitHub Exploit DB Packet Storm

219060	9.8	CRITICAL Network	openbsd	openbsd	iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches.	CWE-287 Improper Authentication	CVE-2020-16088	2024-11-21 14:06	2020-07-28	Show	GitHub Exploit DB Packet Storm