Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257241 7.5 危険 Linux
レッドハット		 - Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
257242 7.8 危険 Linux
レッドハット		 - Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
257243 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4248 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257244 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4246 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257245 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer の smlrender.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4257 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257246 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4245 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257247 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4244 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
257248 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-0376 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
257249 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0375 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
257250 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における HTTP のチャンク転送コーディングの処理に関する脆弱性 CWE-119
バッファエラー 		CVE-2009-4243 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209881 8.8 HIGH
Network 		air_sender_project air_sender Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-23043 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209882 6.1 MEDIUM
Network 		dropouts super_backup Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` module. This vulnerability allows… CWE-79
Cross-site Scripting 		CVE-2020-23042 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209883 6.1 MEDIUM
Network 		dropouts air_share Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` exception-handling. This vulnerability… CWE-79
Cross-site Scripting 		CVE-2020-23041 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209884 7.5 HIGH
Network 		sky_file_project sky_file Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands. CWE-22
Path Traversal 		CVE-2020-23040 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209885 5.4 MEDIUM
Network 		newsoftwares folder_lock Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Create Folder function under the 'create' module. This vulnerability allows attackers to execute … CWE-79
Cross-site Scripting 		CVE-2020-23039 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209886 7.5 HIGH
Network 		kumilabs swift_file_transfer Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including n… CWE-22
Path Traversal 		CVE-2020-23038 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209887 9.8 CRITICAL
Network 		portable playable Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. CWE-94
Code Injection 		CVE-2020-23037 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209888 5.9 MEDIUM
Network 		medianavi smacom MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the `password` authentication parameter of the wifi photo transfer module.… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-23036 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209889 9.8 CRITICAL
Network 		mercury mer1200_firmware
mer1200g_firmware 		A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 and Mercury Router MER1200G v1.0.1. CWE-78
OS Command  		CVE-2020-22724 2024-11-21 14:13 2021-10-14 Show GitHub Exploit DB Packet Storm
209890 5.5 MEDIUM
Local 		gpac gpac Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-22679 2024-11-21 14:13 2021-10-13 Show GitHub Exploit DB Packet Storm