Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132681 7.8 重要
Local 		TKSTAR TECHNOLOGY CO.,LIMITED Q90 Junior GPS horloge ファームウェア TK-Star Q90 Junior GPS horloge デバイスにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2019-20471 2021-10-19 16:35 2019-11-1 Show GitHub Exploit DB Packet Storm
132682 6.8 警告
Physics 		TKSTAR TECHNOLOGY CO.,LIMITED Q90 Junior GPS horloge ファームウェア TK-Star Q90 Junior GPS horloge デバイスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2019-20473 2021-10-19 16:26 2019-11-1 Show GitHub Exploit DB Packet Storm
132683 9.8 緊急
Network 		Facebook Hermes Facebook Hermes における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2020-1896 2021-10-19 16:22 2020-02-27 Show GitHub Exploit DB Packet Storm
132684 6.5 警告
Adjacent 		ネットギア R7350 ファームウェア
AC2400 ファームウェア
R6800 ファームウェア
AC2100 ファームウェア
R7400 ファームウェア
R7450 ファームウェア
R6900 ファームウェア
R7200 ファームウェア
AC2600 ファームウェア 		NETGEAR R7450 ルータにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2020-27873 2021-10-19 16:03 2020-12-16 Show GitHub Exploit DB Packet Storm
132685 8.8 重要
Adjacent 		ネットギア R7350 ファームウェア
AC2400 ファームウェア
R6800 ファームウェア
AC2100 ファームウェア
R7400 ファームウェア
R7450 ファームウェア
R6900 ファームウェア
R7200 ファームウェア
AC2600 ファームウェア 		NETGEAR R7450 ルータにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2020-27872 2021-10-19 16:03 2020-12-16 Show GitHub Exploit DB Packet Storm
132686 5.3 警告
Network 		PrestaShop Quote Prestashop Opart デバイスにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2020-16194 2021-10-19 16:03 2020-07-31 Show GitHub Exploit DB Packet Storm
132687 7.5 重要
Network 		Rockwell Automation Allen-Bradley Flex IO 1794-AENT/B ファームウェア Allen-Bradley Flex IO 1794-AENT/B における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2020-6088 2021-10-19 16:03 2020-11-6 Show GitHub Exploit DB Packet Storm
132688 7.8 重要
Local 		SoftMaker SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2020-27249 2021-10-19 16:03 2020-11-30 Show GitHub Exploit DB Packet Storm
132689 7.8 重要
Local 		SoftMaker SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2020-27248 2021-10-19 16:03 2020-11-30 Show GitHub Exploit DB Packet Storm
132690 7.8 重要
Local 		SoftMaker SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2020-27247 2021-10-19 16:03 2020-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
357911 - luis_bernardo myhelpdesk Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket… NVD-CWE-Other
CVE-2002-0931 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
357912 - luis_bernardo myhelpdesk SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the op… NVD-CWE-Other
CVE-2002-0932 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
357913 - datalex bookit_consumer Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks. NVD-CWE-Other
CVE-2002-0933 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
357914 - jon_hedley alienform2 Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the m… NVD-CWE-Other
CVE-2002-0934 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
357915 - macromedia jrun The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null). NVD-CWE-Other
CVE-2002-0937 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
357916 - cisco secure_access_control_server Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe. NVD-CWE-Other
CVE-2002-0938 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
357917 - ncipher nforce
nshield 		The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application t… NVD-CWE-Other
CVE-2002-0941 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
357918 - lumigent log_explorer Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartPr… NVD-CWE-Other
CVE-2002-0942 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
357919 - metalinks metacart2.sql MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via… NVD-CWE-Other
CVE-2002-0943 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
357920 - deepmetrix livestats Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which a… NVD-CWE-Other
CVE-2002-0944 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm