Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226101 7.5 危険 PHP-Fusion - PHP-Fusion の readmore.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5946 2012-12-20 19:10 2009-01-22 Show GitHub Exploit DB Packet Storm
226102 7.8 危険 zkesoft - AyeView におけるサービス運用妨害 (メモリ消費またはアプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5937 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226103 5 警告 the net guys - The Net Guys ASPired2Blog におけるユーザ名などを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5931 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226104 7.5 危険 the net guys - The Net Guys ASPired2Blog の admin/blog_comments.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5930 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226105 5 警告 vpasp - VP-ASP Shopping Cart におけるパスワードを含むデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5929 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226106 7.5 危険 umerinc - Umer Inc Songs Portal の albums.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5921 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226107 7.5 危険 tigris - WebSVN の utils.inc における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5920 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
226108 6.8 警告 tigris - WebSVN の rss.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5919 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
226109 4.3 警告 tigris - WebSVN の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5918 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
226110 7.5 危険 xrdp - xrdp の rdp/rdp_rdp.c における脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5904 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198551 9.8 CRITICAL
Network 		sys-info_project sys-info An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free. CWE-415
 Double Free 		CVE-2020-36434 2024-11-21 14:29 2021-08-8 Show GitHub Exploit DB Packet Storm
198552 7.5 HIGH
Network 		aeplay chunky An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement. NVD-CWE-noinfo
CVE-2020-36433 2024-11-21 14:29 2021-08-8 Show GitHub Exploit DB Packet Storm
198553 9.8 CRITICAL
Network 		alg_ds_project alg_ds An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new(). CWE-908
 Use of Uninitialized Resource 		CVE-2020-36432 2024-11-21 14:29 2021-08-8 Show GitHub Exploit DB Packet Storm
198554 9.8 CRITICAL
Network 		atlassian jira_data_center
jira_service_desk
jira_service_management 		Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 before 8.17.0 and Jira Service Management Data Center from v… CWE-306
Missing Authentication for Critical Function 		CVE-2020-36239 2024-11-21 14:29 2021-07-29 Show GitHub Exploit DB Packet Storm
198555 5.5 MEDIUM
Local 		unicorn-engine unicorn_engine Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm. CWE-787
 Out-of-bounds Write 		CVE-2020-36431 2024-11-21 14:29 2021-07-20 Show GitHub Exploit DB Packet Storm
198556 7.8 HIGH
Local 		libass_project
fedoraproject 		libass
fedora 		libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction. CWE-787
 Out-of-bounds Write 		CVE-2020-36430 2024-11-21 14:29 2021-07-20 Show GitHub Exploit DB Packet Storm
198557 5.5 MEDIUM
Local 		open62541 open62541 Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth. CWE-787
 Out-of-bounds Write 		CVE-2020-36429 2024-11-21 14:29 2021-07-20 Show GitHub Exploit DB Packet Storm
198558 8.8 HIGH
Network 		matio_project matio matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4). CWE-787
 Out-of-bounds Write 		CVE-2020-36428 2024-11-21 14:29 2021-07-20 Show GitHub Exploit DB Packet Storm
198559 5.5 MEDIUM
Local 		gnome gthumb GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image. NVD-CWE-noinfo
CVE-2020-36427 2024-11-21 14:29 2021-07-20 Show GitHub Exploit DB Packet Storm
198560 7.5 HIGH
Network 		arm
debian 		mbed_tls
debian_linux 		An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte). CWE-125
Out-of-bounds Read 		CVE-2020-36426 2024-11-21 14:29 2021-07-20 Show GitHub Exploit DB Packet Storm