Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241151 5 警告 audioarticledirectory - Audio Article Directory の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2397 2012-06-26 16:10 2009-07-9 Show GitHub Exploit DB Packet Storm
241152 9.3 危険 dutchmonkey - DM Albums の template/album.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-2396 2012-06-26 16:10 2009-07-9 Show GitHub Exploit DB Packet Storm
241153 7.5 危険 f-cimag-in
Joomla!
- Joomla! 用 BookFlip コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2390 2012-06-26 16:10 2009-07-9 Show GitHub Exploit DB Packet Storm
241154 9.3 危険 awingsoft - Awingsoft Awakening Winds3D Viewer プラグインにおける任意のファイルをダウンロードされる脆弱性 CWE-20
不適切な入力確認
CVE-2009-2386 2012-06-26 16:10 2009-07-10 Show GitHub Exploit DB Packet Storm
241155 7.5 危険 Simple Machines
fustrate
- SMF 用 Member Awards コンポーネントの awardsMembers 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2385 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
241156 7.5 危険 blogtrafficexchange
WordPress.org
- WordPress 用の Related Sites プラグインの BTE_RW_Webajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2383 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
241157 5 警告 gizmo5 - Linux 上の Gizmo における任意のユーザの資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2009-2381 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
241158 4.3 警告 4homepages - 4images の includes/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2380 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241159 6.8 警告 BIGACE - BIGACE Web CMS の public/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2379 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
241160 4.3 警告 avax-software - AVAX-software Avax Vector ActiveX の Avax Vector ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2377 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347211 - cisco unified_communications_manager The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a, 6.x before 6.1(3), 7.0x before 7.0(2), 7.1x before 7.1(2), and 8.x before 8.0(1… NVD-CWE-Other
CVE-2010-0592 2010-03-6 01:30 2010-03-6 Show GitHub Exploit DB Packet Storm
347212 - ibm lotus_inotes Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vect… CWE-79
Cross-site Scripting
CVE-2010-0920 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347213 - ibm aix Unspecified vulnerability in secldapclntd in IBM AIX 5.3 with SP 5300-11-02 allows attackers to cause a denial of service (LDAP login failure) via unknown vectors. NOTE: some of these details are ob… NVD-CWE-noinfo
CVE-2010-0922 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347214 - ibm aix Per: ftp://public.dhe.ibm.com/aix/efixes/iz69977/ IZ69977.epkg.Z NVD-CWE-noinfo
CVE-2010-0922 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347215 - kde kde_sc Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an una… CWE-362
Race Condition
CVE-2010-0923 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347216 - apple safari cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.3 and 4.0.4 on Windows, allows remote attackers to cause a denial of service (application crash) via a long s… NVD-CWE-Other
CVE-2010-0924 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347217 - apple safari cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.4 on Windows, allows remote attackers to cause a denial of service (application crash) via a long string in t… NVD-CWE-Other
CVE-2010-0925 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347218 - jtl-software jtl-shop SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter. CWE-89
SQL Injection
CVE-2010-0691 2010-03-3 14:00 2010-02-24 Show GitHub Exploit DB Packet Storm
347219 - iptechinside com_jquarks SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to i… CWE-89
SQL Injection
CVE-2010-0692 2010-03-3 14:00 2010-02-24 Show GitHub Exploit DB Packet Storm
347220 - tdiary tdiary Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vecto… CWE-79
Cross-site Scripting
CVE-2010-0726 2010-03-3 14:00 2010-03-3 Show GitHub Exploit DB Packet Storm