Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226111	7.5	危険	xrdp	-	xrdp の xrdp/funcs.c における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2008-5903	2012-12-20 19:10	2009-01-15	Show	GitHub Exploit DB Packet Storm

226112	7.5	危険	xrdp	-	xrdp の xrdp/xrdp_bitmap.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-5902	2012-12-20 19:10	2009-01-15	Show	GitHub Exploit DB Packet Storm

226113	5	警告	Tincan	-	phplist におけるファイルをインクルードされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-5887	2012-12-20 19:10	2009-01-12	Show	GitHub Exploit DB Packet Storm

226114	5	警告	takempis	-	TAKempis Discussion Web におけるパスワードを含むデータベースファイルをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5886	2012-12-20 19:10	2009-01-12	Show	GitHub Exploit DB Packet Storm

226115	5	警告	the net guys	-	The Net Guys ASPired2Quote におけるユーザ名などを含むデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5885	2012-12-20 19:10	2009-01-12	Show	GitHub Exploit DB Packet Storm

226116	4.3	警告	zkesoft	-	AyeView におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2008-5884	2012-12-20 19:10	2009-01-12	Show	GitHub Exploit DB Packet Storm

226117	7.5	危険	playSMS	-	playSMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5881	2012-12-20 19:10	2009-01-9	Show	GitHub Exploit DB Packet Storm

226118	4.3	警告	phpclanwebsite	-	Phpclanwebsite の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5879	2012-12-20 19:10	2009-01-8	Show	GitHub Exploit DB Packet Storm

226119	10	危険	リアルネットワークス	-	RealNetworks Helix Server などにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-5911	2012-12-20 19:10	2008-12-16	Show	GitHub Exploit DB Packet Storm

226120	5.1	警告	phpclanwebsite	-	Phpclanwebsite におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5878	2012-12-20 19:10	2009-01-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199241	7.5	HIGH Network	expertpdf	expertpdf	A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read.	CWE-552 Files or Directories Accessible to External Parties	CVE-2020-35340	2024-11-21 14:27	2021-09-15	Show	GitHub Exploit DB Packet Storm

199242	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() store_sm_boundary_item() Sloop_of OOB r…	-	CVE-2020-35635	2024-11-21 14:27	2021-08-31	Show	GitHub Exploit DB Packet Storm

199243	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() s…	-	CVE-2020-35634	2024-11-21 14:27	2021-08-31	Show	GitHub Exploit DB Packet Storm

199244	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() s…	-	CVE-2020-35633	2024-11-21 14:27	2021-08-31	Show	GitHub Exploit DB Packet Storm

199245	7.5	HIGH Network	hcc-embedded siemens	nichestack 7km9300-0ae02-0aa0_firmware	An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the ICMP checksum. When …	CWE-125 Out-of-bounds Read	CVE-2020-35683	2024-11-21 14:27	2021-08-19	Show	GitHub Exploit DB Packet Storm

199246	9.1	CRITICAL Network	hcc-embedded siemens	nichestack sentron_3wa_com190_firmware sentron_3wl_com35_firmware	An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attack…	CWE-330 Use of Insufficiently Random Values	CVE-2020-35685	2024-11-21 14:27	2021-08-19	Show	GitHub Exploit DB Packet Storm

199247	7.5	HIGH Network	hcc-embedded siemens	nichestack sentron_3wl_com35_firmware sentron_3wa_com190_firmware	An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the length of the TCP pay…	CWE-20 Improper Input Validation	CVE-2020-35684	2024-11-21 14:27	2021-08-19	Show	GitHub Exploit DB Packet Storm

199248	9.8	CRITICAL Network	phpgurukul	employee_record_management_system	SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication.	CWE-89 SQL Injection	CVE-2020-35427	2024-11-21 14:27	2021-07-20	Show	GitHub Exploit DB Packet Storm

199249	6.1	MEDIUM Network	fiyo	fiyo_cms	In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.	CWE-79 Cross-site Scripting	CVE-2020-35373	2024-11-21 14:27	2021-06-18	Show	GitHub Exploit DB Packet Storm

199250	7.3	HIGH Network	apache debian fedoraproject oracle	http_server debian_linux fedora instantis_enterprisetrack enterprise_manager_ops_center zfs_storage_appliance_kit	Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP …	CWE-787 Out-of-bounds Write	CVE-2020-35452	2024-11-21 14:27	2021-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed