Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226281	9.3	危険	phpblock	-	PhpBlock における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-5210	2012-12-20 18:52	2008-11-24	Show	GitHub Exploit DB Packet Storm

226282	4.3	警告	wellyblog	-	wellyblog の edit.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5205	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

226283	6.8	警告	poweraward	-	PowerAward におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5204	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

226284	4.3	警告	poweraward	-	PowerAward の external_vote.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5203	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

226285	7.5	危険	phpoutsourcing	-	PHPOutsourcing IdeaBox の include.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-5199	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

226286	7.5	危険	vizzed	-	Acmlmboard の memberlist.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5198	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

226287	7.5	危険	PHP-Fusion	-	PHP-Fusion の classifieds.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5197	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

226288	7.5	危険	PHP-Fusion	-	PHP-Fusion 用の Kroax モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5196	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

226289	7.5	危険	sebrac	-	SebracCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5195	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

226290	7.5	危険	softvisions software	-	SoftVisions Software obm の checkavail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5194	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212151	7.8	HIGH Local	google	android	In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional exe…	CWE-787 Out-of-bounds Write	CVE-2020-0094	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212152	5.0	MEDIUM Local	google debian canonical libexif_project opensuse	android debian_linux ubuntu_linux libexif leap	In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privile…	CWE-125 Out-of-bounds Read	CVE-2020-0093	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212153	5.0	MEDIUM Local	google	android	In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This could lead to local information disclosur…	CWE-200 Information Exposure	CVE-2020-0092	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212154	5.5	MEDIUM Local	google	android	In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700	NVD-CWE-noinfo	CVE-2020-0091	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212155	5.5	MEDIUM Local	google	android	An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048	NVD-CWE-noinfo	CVE-2020-0090	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212156	5.5	MEDIUM Local	google	android	An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448	NVD-CWE-noinfo	CVE-2020-0065	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212157	5.5	MEDIUM Local	google	android	An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855	NVD-CWE-noinfo	CVE-2020-0064	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212158	7.8	HIGH Local	google	android	In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalation of privilege with no additional execut…	CWE-276 Incorrect Default Permissions	CVE-2020-0024	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212159	8.1	HIGH Network	dahuasecurity	sd6al_firmware sd5a_firmware sd1a_firmware ptz1a_firmware sd50_firmware sd52c_firmware ipc-hx5842h_firmware ipc-hx7842h_firmware ipc-hx2xxx_firmware ipc-hxxx5x4x_firmware	Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak securi…	CWE-276 Incorrect Default Permissions	CVE-2019-9682	2024-11-21 13:52	2020-05-14	Show	GitHub Exploit DB Packet Storm

212160	7.8	HIGH Local	google	android	In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server …	CWE-502 Deserialization of Untrusted Data	CVE-2020-0082	2024-11-21 13:52	2020-04-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed