Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226031 9 危険 raidenftpd - RaidenFTPD におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6186 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
226032 6.8 警告 publicwarehouse - LightBlog におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6177 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
226033 6.8 警告 weberr - Joomla! 用の RWCards コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6172 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
226034 10 危険 w3bcms - w3b>cms の admin backend における脆弱性 CWE-noinfo
情報不足 		CVE-2008-6158 2012-12-20 19:10 2009-02-17 Show GitHub Exploit DB Packet Storm
226035 5 警告 sepcity - SepCity Classified Ads における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2008-6157 2012-12-20 19:10 2009-02-17 Show GitHub Exploit DB Packet Storm
226036 7.5 危険 sepcity - SepCity Faculty Portal の deptdisplay.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6152 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
226037 7.5 危険 sepcity - SepCity Shopping Mall の shpdetails.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6151 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
226038 7.5 危険 sepcity - SepCity Classified Ads の classdis.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6150 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
226039 7.5 危険 raven-worx - Joomla! 用の liveticker モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6148 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
226040 7.5 危険 Web-Empowered Church Team - TYPO3 用の WEC Discussion Forum エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6145 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198381 7.8 HIGH
Local 		qualcomm apq8009_firmware
apq8053_firmware
apq8096au_firmware
apq8098_firmware
msm8909w_firmware
msm8917_firmware
msm8953_firmware
msm8996au_firmware
nicobar_firmware
qcs405_firmwar… 		Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount taken for this object in Snapdragon Auto, Snapdragon Comput… CWE-415
 Double Free 		CVE-2020-3610 2024-11-21 14:31 2020-06-3 Show GitHub Exploit DB Packet Storm
198382 5.5 MEDIUM
Local 		netqmail
debian
canonical 		netqmail
debian_linux
ubuntu_linux 		qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmai… CWE-269
 Improper Privilege Management 		CVE-2020-3812 2024-11-21 14:31 2020-05-26 Show GitHub Exploit DB Packet Storm
198383 7.5 HIGH
Network 		netqmail
debian
canonical 		netqmail
debian_linux
ubuntu_linux 		qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability. CWE-665
CWE-863
 Improper Initialization
 Incorrect Authorization 		CVE-2020-3811 2024-11-21 14:31 2020-05-26 Show GitHub Exploit DB Packet Storm
198384 5.5 MEDIUM
Local 		debian
fedoraproject
canonical 		debian_linux
apt
fedora
ubuntu_linux 		Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files. CWE-20
CWE-125
 Improper Input Validation 
Out-of-bounds Read 		CVE-2020-3810 2024-11-21 14:31 2020-05-15 Show GitHub Exploit DB Packet Storm
198385 9.1 CRITICAL
Network 		qualcomm msm8998_firmware
qca6390_firmware
sc7180_firmware
sc8180x_firmware
sdm850_firmware 		Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180… CWE-20
CWE-125
 Improper Input Validation 
Out-of-bounds Read 		CVE-2020-3653 2024-11-21 14:31 2020-04-16 Show GitHub Exploit DB Packet Storm
198386 9.1 CRITICAL
Network 		qualcomm msm8998_firmware
qca6390_firmware
sc7180_firmware
sc8180x_firmware
sdm850_firmware 		Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon Con… CWE-20
CWE-125
 Improper Input Validation 
Out-of-bounds Read 		CVE-2020-3652 2024-11-21 14:31 2020-04-16 Show GitHub Exploit DB Packet Storm
198387 7.5 HIGH
Network 		qualcomm apq8009_firmware
apq8017_firmware
apq8053_firmware
apq8096au_firmware
mdm9206_firmware
mdm9207c_firmware
mdm9607_firmware
mdm9640_firmware
mdm9650_firmware
msm8905_firmware… 		Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connec… CWE-617
 Reachable Assertion 		CVE-2020-3651 2024-11-21 14:31 2020-04-16 Show GitHub Exploit DB Packet Storm
198388 7.5 HIGH
Network 		draytek vigorap_910c_firmware A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage. NVD-CWE-noinfo
CVE-2020-3932 2024-11-21 14:31 2020-04-15 Show GitHub Exploit DB Packet Storm
198389 9.8 CRITICAL
Network 		apple mac_os_x A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arb… CWE-20
CWE-787
 Improper Input Validation 
 Out-of-bounds Write 		CVE-2020-3850 2024-11-21 14:31 2020-04-2 Show GitHub Exploit DB Packet Storm
198390 9.8 CRITICAL
Network 		apple mac_os_x A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arb… CWE-20
CWE-787
 Improper Input Validation 
 Out-of-bounds Write 		CVE-2020-3849 2024-11-21 14:31 2020-04-2 Show GitHub Exploit DB Packet Storm