Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226101 7.5 危険 PHP-Fusion - PHP-Fusion の readmore.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5946 2012-12-20 19:10 2009-01-22 Show GitHub Exploit DB Packet Storm
226102 7.8 危険 zkesoft - AyeView におけるサービス運用妨害 (メモリ消費またはアプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5937 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226103 5 警告 the net guys - The Net Guys ASPired2Blog におけるユーザ名などを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5931 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226104 7.5 危険 the net guys - The Net Guys ASPired2Blog の admin/blog_comments.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5930 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226105 5 警告 vpasp - VP-ASP Shopping Cart におけるパスワードを含むデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5929 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226106 7.5 危険 umerinc - Umer Inc Songs Portal の albums.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5921 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
226107 7.5 危険 tigris - WebSVN の utils.inc における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5920 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
226108 6.8 警告 tigris - WebSVN の rss.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5919 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
226109 4.3 警告 tigris - WebSVN の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5918 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
226110 7.5 危険 xrdp - xrdp の rdp/rdp_rdp.c における脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5904 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198841 8.8 HIGH
Local 		veritas system_recovery An issue was discovered in Veritas System Recovery before 21.2. On start-up, it loads the OpenSSL library from \usr\local\ssl. This library attempts to load the from \usr\local\ssl\openssl.cnf config… NVD-CWE-noinfo
CVE-2020-36160 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198842 7.5 HIGH
Network 		gjson_project gjson GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call. CWE-129
 Improper Validation of Array Index 		CVE-2020-36067 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198843 7.5 HIGH
Network 		gjson_project gjson GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON. NVD-CWE-noinfo
CVE-2020-36066 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198844 5.3 MEDIUM
Network 		veritas desktop_and_laptop_option Veritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication. NVD-CWE-noinfo
CVE-2020-36159 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198845 6.7 MEDIUM
Local 		linux
fedoraproject
debian
netapp 		linux_kernel
fedora
debian_linux
cloud_backup
solidfire_baseboard_management_controller_firmware 		mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID… CWE-120
Classic Buffer Overflow 		CVE-2020-36158 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
198846 9.8 CRITICAL
Network 		ultimatemember ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that cou… NVD-CWE-noinfo
CVE-2020-36157 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
198847 8.8 HIGH
Network 		ultimatemember ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page cou… CWE-269
 Improper Privilege Management 		CVE-2020-36156 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
198848 9.8 CRITICAL
Network 		ultimatemember ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive me… CWE-269
 Improper Privilege Management 		CVE-2020-36155 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
198849 7.8 HIGH
Local 		pearson vue_testing_system The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-36154 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
198850 9.8 CRITICAL
Network 		cse_bookstore_project cse_bookstore CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of th… CWE-89
SQL Injection 		CVE-2020-36112 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm