Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226041	4.3	警告	Web-Empowered Church Team	-	TYPO3 用の WEC Discussion Forum エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6144	2012-12-20 19:10	2009-02-16	Show	GitHub Exploit DB Packet Storm

226042	5	警告	webbiscuits	-	WebBiscuits Modules Controller の faqsupport/wce.download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6139	2012-12-20 19:10	2009-02-13	Show	GitHub Exploit DB Packet Storm

226043	7.5	危険	webbiscuits	-	WebBiscuits Modules Controller の adminhead.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6138	2012-12-20 19:10	2009-02-13	Show	GitHub Exploit DB Packet Storm

226044	7.5	危険	socialengine	-	SocialEngine における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2008-6121	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226045	7.5	危険	socialengine	-	SocialEngine の profile_comments.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6120	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226046	7.5	危険	pilotgroup	-	PG Job Site Pro の homepage.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6117	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226047	7.5	危険	prozilla	-	Prozilla Hosting Index の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6115	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226048	4.3	警告	SemanticScuttle	-	SemanticScuttle におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6113	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226049	5	警告	Scriptsez.net	-	Ez Ringtone Manager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6112	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226050	10	危険	SemanticScuttle	-	SemanticScuttle における脆弱性	CWE-noinfo 情報不足	CVE-2008-6110	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198381	7.8	HIGH Local	qualcomm	apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware msm8909w_firmware msm8917_firmware msm8953_firmware msm8996au_firmware nicobar_firmware qcs405_firmwar…	Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount taken for this object in Snapdragon Auto, Snapdragon Comput…	CWE-415 Double Free	CVE-2020-3610	2024-11-21 14:31	2020-06-3	Show	GitHub Exploit DB Packet Storm

198382	5.5	MEDIUM Local	netqmail debian canonical	netqmail debian_linux ubuntu_linux	qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmai…	CWE-269 Improper Privilege Management	CVE-2020-3812	2024-11-21 14:31	2020-05-26	Show	GitHub Exploit DB Packet Storm

198383	7.5	HIGH Network	netqmail debian canonical	netqmail debian_linux ubuntu_linux	qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.	CWE-665 CWE-863 Improper Initialization Incorrect Authorization	CVE-2020-3811	2024-11-21 14:31	2020-05-26	Show	GitHub Exploit DB Packet Storm

198384	5.5	MEDIUM Local	debian fedoraproject canonical	debian_linux apt fedora ubuntu_linux	Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.	CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read	CVE-2020-3810	2024-11-21 14:31	2020-05-15	Show	GitHub Exploit DB Packet Storm

198385	9.1	CRITICAL Network	qualcomm	msm8998_firmware qca6390_firmware sc7180_firmware sc8180x_firmware sdm850_firmware	Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180…	CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read	CVE-2020-3653	2024-11-21 14:31	2020-04-16	Show	GitHub Exploit DB Packet Storm

198386	9.1	CRITICAL Network	qualcomm	msm8998_firmware qca6390_firmware sc7180_firmware sc8180x_firmware sdm850_firmware	Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon Con…	CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read	CVE-2020-3652	2024-11-21 14:31	2020-04-16	Show	GitHub Exploit DB Packet Storm

198387	7.5	HIGH Network	qualcomm	apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware…	Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connec…	CWE-617 Reachable Assertion	CVE-2020-3651	2024-11-21 14:31	2020-04-16	Show	GitHub Exploit DB Packet Storm

198388	7.5	HIGH Network	draytek	vigorap_910c_firmware	A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage.	NVD-CWE-noinfo	CVE-2020-3932	2024-11-21 14:31	2020-04-15	Show	GitHub Exploit DB Packet Storm

198389	9.8	CRITICAL Network	apple	mac_os_x	A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arb…	CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write	CVE-2020-3850	2024-11-21 14:31	2020-04-2	Show	GitHub Exploit DB Packet Storm

198390	9.8	CRITICAL Network	apple	mac_os_x	A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arb…	CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write	CVE-2020-3849	2024-11-21 14:31	2020-04-2	Show	GitHub Exploit DB Packet Storm