Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247741 6.8 警告 expinion - PollPro の admin/agent_edit.asp におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-0112 2012-06-26 16:10 2009-01-9 Show GitHub Exploit DB Packet Storm
247742 7.5 危険 goople cms - Goople CMS の frontpage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0111 2012-06-26 16:10 2009-01-9 Show GitHub Exploit DB Packet Storm
247743 6.8 警告 freedesktop.org
Mozilla Foundation		 - xdg-open における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0068 2012-06-26 16:10 2009-01-3 Show GitHub Exploit DB Packet Storm
247744 5.5 警告 ネットギア
Atheros		 - Atheros AR9160-BC1A チップセット上の Netgear WNDAP330 Wi-Fi アクセスポイントなどで使用される Atheros 無線ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-0052 2012-06-26 16:10 2009-11-12 Show GitHub Exploit DB Packet Storm
247745 5 警告 eid - eidlib における証明書チェーンの検証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-0049 2012-06-26 16:10 2009-01-7 Show GitHub Exploit DB Packet Storm
247746 5 警告 gale - Gale における証明書チェーンの検証を回避される脆弱性 CWE-287
CWE-310
CVE-2009-0047 2012-06-26 16:10 2009-01-7 Show GitHub Exploit DB Packet Storm
247747 6.8 警告 Apache Software Foundation - Apache Geronimo Application Server の Web 管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-0039 2012-06-26 16:10 2009-04-17 Show GitHub Exploit DB Packet Storm
247748 4.3 警告 Apache Software Foundation - Apache Geronimo Application Server の Web 管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0038 2012-06-26 16:10 2009-04-17 Show GitHub Exploit DB Packet Storm
247749 10 危険 Standards Based Linux Instrumentation (SBLIM) - SFCB における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2008-7230 2012-06-26 16:10 2009-09-14 Show GitHub Exploit DB Packet Storm
247750 5 警告 Mambo Foundation
brilaps		 - Mambo で使用される MOStlyCE における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7212 2012-06-26 16:10 2009-09-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219571 9.8 CRITICAL
Network 		contiki-ng contiki-ng Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. The function parsing the received SNMP request does not verify the input message's requested variables against the c… CWE-787
 Out-of-bounds Write 		CVE-2020-14934 2024-11-21 14:04 2020-08-19 Show GitHub Exploit DB Packet Storm
219572 9.1 CRITICAL
Network 		ftp-srv_project ftp-srv ftp-srv is an npm package which is a modern and extensible FTP server designed to be simple yet configurable. In ftp-srv before versions 2.19.6, 3.1.2, and 4.3.4 are vulnerable to Server-Side Request… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-15152 2024-11-21 14:04 2020-08-18 Show GitHub Exploit DB Packet Storm
219573 9.0 CRITICAL
Network 		openapi-python-client_project openapi-python-client In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbit… CWE-94
Code Injection 		CVE-2020-15142 2024-11-21 14:04 2020-08-15 Show GitHub Exploit DB Packet Storm
219574 4.1 MEDIUM
Network 		openapi-python-client_project openapi-python-client In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files t… - CVE-2020-15141 2024-11-21 14:04 2020-08-15 Show GitHub Exploit DB Packet Storm
219575 8.2 HIGH
Local 		getcomposer composer-setup In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit the following scenarios. 1. A local regular user ma… - CVE-2020-15145 2024-11-21 14:04 2020-08-15 Show GitHub Exploit DB Packet Storm
219576 5.9 MEDIUM
Physics 		horndis_project horndis All versions of HoRNDIS are affected by an integer overflow in the RNDIS packet parsing routines. A malicious USB device can trigger disclosure of unrelated kernel memory to userspace applications on… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-15137 2024-11-21 14:04 2020-08-13 Show GitHub Exploit DB Packet Storm
219577 6.1 MEDIUM
Network 		getsymphony symphony content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading. CWE-79
Cross-site Scripting 		CVE-2020-15071 2024-11-21 14:04 2020-08-12 Show GitHub Exploit DB Packet Storm
219578 7.8 HIGH
Local 		evga
winring0_project 		precision_x1
winring0 		The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allow… NVD-CWE-noinfo
CVE-2020-14979 2024-11-21 14:04 2020-08-12 Show GitHub Exploit DB Packet Storm
219579 6.1 MEDIUM
Network 		mybb mybb In MyBB before version 1.8.24, the custom MyCode (BBCode) for the visual editor doesn't escape input properly when rendering HTML, resulting in a DOM-based XSS vulnerability. The weakness can be expl… CWE-79
Cross-site Scripting 		CVE-2020-15139 2024-11-21 14:04 2020-08-11 Show GitHub Exploit DB Packet Storm
219580 6.5 MEDIUM
Adjacent 		digitus da-70254_firmware DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-15065 2024-11-21 14:04 2020-08-8 Show GitHub Exploit DB Packet Storm