Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226271	7.5	危険	wportfolio	-	wPortfolio の admin/userinfo.php における admin アカウントのパスワードを変更される脆弱性	CWE-287 不適切な認証	CVE-2008-5221	2012-12-20 18:52	2008-11-25	Show	GitHub Exploit DB Packet Storm

226272	10	危険	wportfolio	-	wPortfolio の admin/upload_form.php における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5220	2012-12-20 18:52	2008-11-25	Show	GitHub Exploit DB Packet Storm

226273	7.5	危険	videoscript	-	VVideoScript のパスワード変更機能における admin アカウントパスワードを変更される脆弱性	CWE-287 不適切な認証	CVE-2008-5219	2012-12-20 18:52	2008-11-25	Show	GitHub Exploit DB Packet Storm

226274	5	警告	Scriptsez.net	-	ScriptsEz FREEze Greetings における平文パスワードを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5218	2012-12-20 18:52	2008-11-25	Show	GitHub Exploit DB Packet Storm

226275	5.1	警告	phpc0d3r	-	txtCMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5217	2012-12-20 18:52	2008-11-24	Show	GitHub Exploit DB Packet Storm

226276	7.5	危険	toddwoolums	-	Todd Woolums ASP News Management の viewnews.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5273	2012-12-20 18:52	2008-11-28	Show	GitHub Exploit DB Packet Storm

226277	4	警告	SyndeoCMS	-	Fred Stuurman SyndeoCMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5272	2012-12-20 18:52	2008-11-28	Show	GitHub Exploit DB Packet Storm

226278	4.3	警告	SyndeoCMS	-	Fred Stuurman SyndeoCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5271	2012-12-20 18:52	2008-11-28	Show	GitHub Exploit DB Packet Storm

226279	7.5	危険	wareziz	-	Yuhhu Superstar の view.topics.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5270	2012-12-20 18:52	2008-11-28	Show	GitHub Exploit DB Packet Storm

226280	2.6	注意	Ando Saabas	-	Sphider の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5211	2012-12-20 18:52	2008-11-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198531	5.9	MEDIUM Network	may_queue_project	may_queue	An issue was discovered in the may_queue crate through 2020-11-10 for Rust. Because Queue does not have bounds on its Send trait or Sync trait, memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36217	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198532	5.9	MEDIUM Network	petabi	eventio	An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread, a data race and memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36216	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198533	7.5	HIGH Network	hashconsing_project	hashconsing	An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send trait or Sync trait, memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36215	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198534	5.9	MEDIUM Network	multiqueue2_project	multiqueue2	An issue was discovered in the multiqueue2 crate before 0.1.7 for Rust. Because a non-Send type can be sent to a different thread, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36214	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198535	7.5	HIGH Network	abi_stable_project	abi_stable	An issue was discovered in the abi_stable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string, violating soundness.	NVD-CWE-noinfo	CVE-2020-36213	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198536	7.5	HIGH Network	abi_stable_project	abi_stable	An issue was discovered in the abi_stable crate before 0.9.1 for Rust. DrainFilter lacks soundness because of a double drop.	NVD-CWE-noinfo	CVE-2020-36212	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198537	7.0	HIGH Local	devolutions	gfwx	An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36211	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198538	7.8	HIGH Local	autorand_project	autorand	An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption.	CWE-787 CWE-908 Out-of-bounds Write Use of Uninitialized Resource	CVE-2020-36210	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198539	7.0	HIGH Local	late-static_project	late-static	An issue was discovered in the late-static crate before 0.4.0 for Rust. Because Sync is implemented for LateStatic with T: Send, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36209	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198540	7.8	HIGH Local	conquer-once_project	conquer-once	An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sync type, leading to memory corruption.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36208	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed