Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
238401 7.2 危険 アップル - Apple Safari の Installer における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2027 2012-06-26 16:10 2009-06-10 Show GitHub Exploit DB Packet Storm
238402 7.5 危険 dutchmonkey - DM FileManager の admin/login.php における管理者のアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2025 2012-06-26 16:10 2009-06-9 Show GitHub Exploit DB Packet Storm
238403 5 警告 fipsasp - fipsCMS Light における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2022 2012-06-26 16:10 2009-06-9 Show GitHub Exploit DB Packet Storm
238404 7.5 危険 frontisgroup - Frontis の bin/aps_browse_sources.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2013 2012-06-26 16:10 2009-06-9 Show GitHub Exploit DB Packet Storm
238405 9.3 危険 dxstudio
Mozilla Foundation
- Worldweaver DX Studio Player における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2009-2011 2012-06-26 16:10 2009-06-1 Show GitHub Exploit DB Packet Storm
238406 4.3 警告 Dokeos - Dokeos におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2009 2012-06-26 16:10 2009-06-8 Show GitHub Exploit DB Packet Storm
238407 6.8 警告 Dokeos - Dokeos における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2008 2012-06-26 16:10 2009-06-8 Show GitHub Exploit DB Packet Storm
238408 5 警告 Dokeos - Dokeos におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2007 2012-06-26 16:10 2009-06-8 Show GitHub Exploit DB Packet Storm
238409 2.6 注意 Dokeos - Dokeos におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2006 2012-06-26 16:10 2009-06-8 Show GitHub Exploit DB Packet Storm
238410 6.8 警告 Dokeos - Dokeos におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-2005 2012-06-26 16:10 2009-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256631 9.8 CRITICAL
Network
linen linen Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password. This occurs in create in apps/web/pages/api/forgot-password/index.ts. NVD-CWE-Other
CVE-2024-45522 2024-09-5 23:29 2024-09-2 Show GitHub Exploit DB Packet Storm
256632 7.5 HIGH
Network
linuxfoundation
rdkcentral
google
yocto
rdk-b
android
In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not nee… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2024-20089 2024-09-5 23:28 2024-09-2 Show GitHub Exploit DB Packet Storm
256633 4.4 MEDIUM
Local
google android In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not n… CWE-125
Out-of-bounds Read
CVE-2024-20088 2024-09-5 23:27 2024-09-2 Show GitHub Exploit DB Packet Storm
256634 6.7 MEDIUM
Local
google android In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not neede… CWE-787
 Out-of-bounds Write
CVE-2024-20087 2024-09-5 23:26 2024-09-2 Show GitHub Exploit DB Packet Storm
256635 6.7 MEDIUM
Local
google android In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not neede… CWE-787
 Out-of-bounds Write
CVE-2024-20086 2024-09-5 23:26 2024-09-2 Show GitHub Exploit DB Packet Storm
256636 7.5 HIGH
Network
abcd-community abcd A vulnerability classified as problematic was found in ABCD ABCD2 up to 2.2.0-beta-1. This vulnerability affects unknown code of the file /abcd/opac/php/otros_sitios.php. The manipulation of the argu… CWE-22
Path Traversal
CVE-2024-8410 2024-09-5 23:20 2024-09-5 Show GitHub Exploit DB Packet Storm
256637 7.5 HIGH
Network
abcd-community abcd A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This affects an unknown part of the file /common/show_image.php. The manipulation of the argument image lead… CWE-22
Path Traversal
CVE-2024-8409 2024-09-5 23:20 2024-09-5 Show GitHub Exploit DB Packet Storm
256638 4.3 MEDIUM
Network
abcd-community abcd A vulnerability, which was classified as problematic, has been found in ABCD ABCD2 up to 2.2.0-beta-1. This issue affects some unknown processing of the file /buscar_integrada.php. The manipulation o… CWE-79
Cross-site Scripting
CVE-2024-8411 2024-09-5 23:19 2024-09-5 Show GitHub Exploit DB Packet Storm
256639 7.8 HIGH
Local
yandex yandex_browser Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used. CWE-426
 Untrusted Search Path
CVE-2024-6473 2024-09-5 23:19 2024-09-3 Show GitHub Exploit DB Packet Storm
256640 9.6 CRITICAL
Adjacent
progress openedge Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge … CWE-94
Code Injection
CVE-2024-7345 2024-09-5 23:11 2024-09-4 Show GitHub Exploit DB Packet Storm