Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239981 7.5 危険 mischa heissmann - TYPO3 用の No indexed Search エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4341 2012-09-25 17:38 2009-12-17 Show GitHub Exploit DB Packet Storm
239982 4.3 警告 mischa heissmann - TYPO3 用の No indexed Search エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4340 2012-09-25 17:38 2009-12-17 Show GitHub Exploit DB Packet Storm
239983 7.5 危険 jean-david gadina - TYPO3 用の Flash SlideShow 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4338 2012-09-25 17:38 2009-12-17 Show GitHub Exploit DB Packet Storm
239984 4.6 警告 IBM - IBM DB2 の STMM コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4334 2012-09-25 17:38 2009-12-16 Show GitHub Exploit DB Packet Storm
239985 5 警告 IBM - IBM DB2 の db2pd におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4332 2012-09-25 17:38 2009-12-16 Show GitHub Exploit DB Packet Storm
239986 5 警告 IBM - IBM DB2 の Common Code Infrastructure コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4327 2012-09-25 17:38 2009-12-16 Show GitHub Exploit DB Packet Storm
239987 4.3 警告 IBM - IBM DB2 の RAND scalar 関数における保護メカニズムを回避される脆弱性 CWE-200
情報漏えい 		CVE-2009-4326 2012-09-25 17:38 2009-12-16 Show GitHub Exploit DB Packet Storm
239988 6.4 警告 IBM - IBM DB2 の Client Interfaces コンポーネントにおける "外部メモリ" を上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4325 2012-09-25 17:38 2009-12-16 Show GitHub Exploit DB Packet Storm
239989 4.3 警告 lythgoes - TNG の searchform.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4320 2012-09-25 17:38 2009-12-14 Show GitHub Exploit DB Packet Storm
239990 6.8 警告 nuggetz - Nuggetz CMS の admin/ajaxsave.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4315 2012-09-25 17:38 2009-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
801 - - - An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP requests to cause th… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-9105 2026-06-30 02:16 2026-06-30 Show GitHub Exploit DB Packet Storm
802 5.4 MEDIUM
Network 		- - A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with administr… New CWE-79
Cross-site Scripting 		CVE-2026-50767 2026-06-30 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
803 5.4 MEDIUM
Network 		- - A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with edit_items permis… New CWE-79
Cross-site Scripting 		CVE-2026-50766 2026-06-30 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
804 6.1 MEDIUM
Network 		- - A stored cross-site scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker … New CWE-79
Cross-site Scripting 		CVE-2026-50765 2026-06-30 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
805 6.5 MEDIUM
Network 		- - Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obtain reusable, poten… New CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-13437 2026-06-30 02:16 2026-06-30 Show GitHub Exploit DB Packet Storm
806 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… New - CVE-2026-12672 2026-06-30 02:16 2026-06-30 Show GitHub Exploit DB Packet Storm
807 10.0 CRITICAL
Network 		kidocode crawl4ai Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only blocks attributes st… Update CWE-94
CWE-913
Code Injection
 Improper Control of Dynamically-Managed Code Resources 		CVE-2026-53753 2026-06-30 01:57 2026-06-24 Show GitHub Exploit DB Packet Storm
808 7.5 HIGH
Network 		kidocode crawl4ai Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection (validate_webhook_url / validate_url_destination in deploy/docker/utils.py) used… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-53754 2026-06-30 01:53 2026-06-24 Show GitHub Exploit DB Packet Storm
809 7.5 HIGH
Network 		kidocode crawl4ai Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unau… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-53755 2026-06-30 01:50 2026-06-24 Show GitHub Exploit DB Packet Storm
810 4.4 MEDIUM
Local 		fortra file_integrity_monitoring Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command whil… Update CWE-266
 Incorrect Privilege Assignment 		CVE-2026-12164 2026-06-30 01:21 2026-06-24 Show GitHub Exploit DB Packet Storm