Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257661 2.6 注意 The PHP Group
サイバートラスト株式会社
ターボリナックス
レッドハット		 - PHP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5814 2010-10-19 15:14 2008-12-19 Show GitHub Exploit DB Packet Storm
257662 9.3 危険 Google - Google Chrome の Gears プラグインにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-3932 2010-10-19 15:02 2009-11-5 Show GitHub Exploit DB Packet Storm
257663 4.3 警告 Google - Google Chrome の src/webkit/glue/webframeloaderclient_impl.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3934 2010-10-19 15:02 2009-11-5 Show GitHub Exploit DB Packet Storm
257664 9.3 危険 Google - Google Chrome のブラックリストにおける危険なファイルのダウンロードを強制される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-3931 2010-10-19 15:01 2009-11-5 Show GitHub Exploit DB Packet Storm
257665 7.5 危険 Google - Google Chrome における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-3456 2010-10-19 15:01 2009-09-29 Show GitHub Exploit DB Packet Storm
257666 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7246 2010-10-19 15:01 2008-09-8 Show GitHub Exploit DB Packet Storm
257667 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3268 2010-10-19 15:00 2009-02-3 Show GitHub Exploit DB Packet Storm
257668 4.3 警告 Google - Google Chrome の getSVGDocument メソッドにおけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3264 2010-10-19 15:00 2009-09-15 Show GitHub Exploit DB Packet Storm
257669 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3263 2010-10-19 14:59 2009-09-15 Show GitHub Exploit DB Packet Storm
257670 4.3 警告 Google - Google Chrome における data: URI をブロックしない脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3011 2010-10-19 14:59 2009-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213351 6.5 MEDIUM
Network 		axiosys bento4 An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42aa… CWE-787
 Out-of-bounds Write 		CVE-2020-21066 2024-11-21 14:12 2021-08-14 Show GitHub Exploit DB Packet Storm
213352 5.4 MEDIUM
Network 		domainmod domainmod A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter. CWE-79
Cross-site Scripting 		CVE-2020-20990 2024-11-21 14:12 2021-08-13 Show GitHub Exploit DB Packet Storm
213353 4.3 MEDIUM
Network 		domainmod domainmod A cross-site request forgery (CSRF) in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs. CWE-352
 Origin Validation Error 		CVE-2020-20989 2024-11-21 14:12 2021-08-13 Show GitHub Exploit DB Packet Storm
213354 5.4 MEDIUM
Network 		domainmod domainmod A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Exp… CWE-79
Cross-site Scripting 		CVE-2020-20988 2024-11-21 14:12 2021-08-13 Show GitHub Exploit DB Packet Storm
213355 7.5 HIGH
Network 		metinfo metinfo A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information. CWE-89
SQL Injection 		CVE-2020-20981 2024-11-21 14:12 2021-08-13 Show GitHub Exploit DB Packet Storm
213356 9.8 CRITICAL
Network 		8cms ljcms An arbitrary file upload vulnerability in the move_uploaded_file() function of LJCMS v4.3 allows attackers to execute arbitrary code. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-20979 2024-11-21 14:12 2021-08-13 Show GitHub Exploit DB Packet Storm
213357 5.4 MEDIUM
Network 		ukcms ukcms A stored cross site scripting (XSS) vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section. CWE-79
Cross-site Scripting 		CVE-2020-20977 2024-11-21 14:12 2021-08-13 Show GitHub Exploit DB Packet Storm
213358 9.8 CRITICAL
Network 		gxlcms gxlcms In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter. CWE-89
SQL Injection 		CVE-2020-20975 2024-11-21 14:12 2021-08-13 Show GitHub Exploit DB Packet Storm
213359 6.5 MEDIUM
Network 		maccms maccms An arbitrary file deletion vulnerability exists within Maccms10. CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2020-21363 2024-11-21 14:12 2021-08-12 Show GitHub Exploit DB Packet Storm
213360 5.4 MEDIUM
Network 		maccms maccms A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter. CWE-79
Cross-site Scripting 		CVE-2020-21362 2024-11-21 14:12 2021-08-12 Show GitHub Exploit DB Packet Storm