Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226331	7.5	危険	TYPO3 Association	-	TYPO3 用の pmk_rssnewsexport エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6595	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

226332	7.5	危険	TYPO3 Association	-	TYPO3 用の cm_rdfexport エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6594	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

226333	6.8	警告	Vuze, Inc.	-	Vuze の index.tmpl におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-6587	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

226334	6.8	警告	BitTorrent, Inc.	-	uTorrent WebUI の gui/index.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-6586	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

226335	6.8	警告	TorrentFlux	-	TorrentFlux の html/admin.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-6585	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

226336	6	警告	TorrentFlux	-	TorrentFlux の html/index.php における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-6584	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

226337	6.8	警告	yehe	-	Yehe における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6568	2012-12-20 19:10	2009-03-31	Show	GitHub Exploit DB Packet Storm

226338	10	危険	puppetmaster	-	The Puppet Master WebUtil の cgi-bin/webutil.pl における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6557	2012-12-20 19:10	2009-03-30	Show	GitHub Exploit DB Packet Storm

226339	10	危険	puppetmaster	-	The Puppet Master WebUtil の cgi-bin/webutil.pl における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6556	2012-12-20 19:10	2009-03-30	Show	GitHub Exploit DB Packet Storm

226340	10	危険	puppetmaster	-	The Puppet Master WebUtil の cgi-bin/webutil.pl における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6555	2012-12-20 19:10	2009-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211481	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary c…	CWE-787 Out-of-bounds Write	CVE-2020-0997	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

211482	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions. An attacker who successfully exploited this vulnerability could…	CWE-862 Missing Authorization	CVE-2020-0989	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

211483	6.7	MEDIUM Local	microsoft	windows_10 windows_server_2016 windows_server_2019 powershell	<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this …	NVD-CWE-noinfo	CVE-2020-0951	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

211484	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_8.1 windows_server_2019	<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information t…	NVD-CWE-noinfo	CVE-2020-0941	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

211485	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to f…	NVD-CWE-noinfo	CVE-2020-0928	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

211486	8.8	HIGH Network	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary c…	NVD-CWE-noinfo	CVE-2020-0922	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

211487	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai…	NVD-CWE-noinfo	CVE-2020-0914	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

211488	7.0	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.</p> <p>To exploit this vulnerability, an attacker would first have to ga…	NVD-CWE-noinfo	CVE-2020-0912	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

211489	7.8	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co…	NVD-CWE-noinfo	CVE-2020-0911	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

211490	7.5	HIGH Network	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a vict…	NVD-CWE-noinfo	CVE-2020-0908	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed