Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255111 4.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の tc_fill_tclass 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-3228 2010-01-26 11:37 2009-10-19 Show GitHub Exploit DB Packet Storm
255112 9.3 危険 マイクロソフト - Microsoft Windows の Indeo32 コーデックの ir32_32.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-4313 2010-01-25 11:53 2009-12-8 Show GitHub Exploit DB Packet Storm
255113 9.3 危険 マイクロソフト - Microsoft Windows の Indeo コーデックにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4312 2010-01-25 11:52 2009-12-8 Show GitHub Exploit DB Packet Storm
255114 9.3 危険 マイクロソフト - Microsoft Windows の Indeo コーデックにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4311 2010-01-25 11:52 2009-12-8 Show GitHub Exploit DB Packet Storm
255115 9.3 危険 マイクロソフト - Indeo コーデックに複数の脆弱性 CWE-119
バッファエラー 		CVE-2009-4310 2010-01-25 11:52 2009-12-15 Show GitHub Exploit DB Packet Storm
255116 9.3 危険 マイクロソフト - Microsoft Windows の Windows Media Player 用の Intel Indeo41 コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4309 2010-01-25 11:51 2009-12-8 Show GitHub Exploit DB Packet Storm
255117 9.3 危険 マイクロソフト - Microsoft Windows の Indeo コーデックにおけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4210 2010-01-25 11:51 2009-12-8 Show GitHub Exploit DB Packet Storm
255118 5 警告 アップル
サイバートラスト株式会社
IPsec-Tools
レッドハット		 - Ipsec-tools の証明書検証および NAT-Traversal におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1632 2010-01-25 11:48 2009-05-14 Show GitHub Exploit DB Packet Storm
255119 4 警告 PostgreSQL.org
サイバートラスト株式会社
ターボリナックス
サン・マイクロシステムズ
レッドハット		 - PostgreSQL のエラーメッセージの変換処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0922 2010-01-25 11:48 2009-03-17 Show GitHub Exploit DB Packet Storm
255120 5.7 警告 日本電気
インターネットイニシアティブ
ヤマハ
古河電気工業		 - IPv6 を実装した複数の製品にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		- 2010-01-25 11:47 2009-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209721 6.5 MEDIUM
Network 		drupal drupal The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module (which come… CWE-863
 Incorrect Authorization 		CVE-2020-13676 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
209722 9.8 CRITICAL
Network 		drupal drupal Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all file validation, which causes an access bypass vulnerability. An attacker migh… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-13675 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
209723 6.5 MEDIUM
Network 		drupal drupal The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues. Sites are only affe… CWE-352
 Origin Validation Error 		CVE-2020-13674 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
209724 6.1 MEDIUM
Network 		drupal entity_embed The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is ac… CWE-79
Cross-site Scripting 		CVE-2020-13673 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
209725 6.1 MEDIUM
Network 		drupal drupal Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions pr… CWE-79
Cross-site Scripting 		CVE-2020-13672 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
209726 7.5 HIGH
Network 		drupal drupal Information Disclosure vulnerability in file module of Drupal Core allows an attacker to gain access to the file metadata of a permanent private file that they do not have access to by guessing the I… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-13670 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
209727 6.1 MEDIUM
Network 		drupal drupal Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10.; 8.9.x versions prior to 8.9.6; 9.0.… CWE-79
Cross-site Scripting 		CVE-2020-13669 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
209728 6.1 MEDIUM
Network 		drupal drupal Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8… CWE-79
Cross-site Scripting 		CVE-2020-13668 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
209729 6.1 MEDIUM
Network 		outsystems lifetime_management_console
platform_server
outsystems 		A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04, affecting generated applications. It could allow an unauthenticated remote attacker to craft and store m… CWE-79
Cross-site Scripting 		CVE-2020-13639 2024-11-21 14:01 2021-08-31 Show GitHub Exploit DB Packet Storm
209730 8.8 HIGH
Network 		rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The entities_id parameter in the 'entities/fields page (mulitple_edit … CWE-89
SQL Injection 		CVE-2020-13589 2024-11-21 14:01 2021-08-18 Show GitHub Exploit DB Packet Storm