Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226351 5.1 警告 sql-ledger - SQL-Ledger の Preferences メニュー項目におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3583 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
226352 6.5 警告 sql-ledger - SQL-Ledger の delete サブルーチンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3582 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
226353 3.5 注意 sql-ledger - SQL-Ledger におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3581 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
226354 6.8 警告 sql-ledger - SQL-Ledger の am.pl におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-3580 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
226355 10 危険 tatsuhiro tsujikawa - aria の DHTRoutingTableDeserializer.cc におけるバッファオーバーフローの脆弱性 CWE-noinfo
情報不足 		CVE-2009-3575 2012-12-20 19:28 2009-10-7 Show GitHub Exploit DB Packet Storm
226356 9.3 危険 tony million - Tuniac におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-3574 2012-12-20 19:28 2009-10-6 Show GitHub Exploit DB Packet Storm
226357 2.6 注意 xerver - Xerver HTTP Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3562 2012-12-20 19:28 2009-10-5 Show GitHub Exploit DB Packet Storm
226358 5 警告 xerver - Xerver HTTP Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3561 2012-12-20 19:28 2009-10-5 Show GitHub Exploit DB Packet Storm
226359 2.1 注意 レッドハット - Red Hat JBoss Enterprise Application Platform の Twiddle における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-3554 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
226360 5 警告 Wireshark - Wireshark の SMB 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-3551 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196811 4.3 MEDIUM
Network 		nextcloud nextcloud_server Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app. CWE-863
 Incorrect Authorization 		CVE-2020-8119 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
196812 5.0 MEDIUM
Network 		nextcloud
novell
opensuse 		nextcloud_server
suse_linux_enterprise_server
backports_sle 		An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8118 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
196813 4.3 MEDIUM
Network 		nextcloud nextcloud_server Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event. CWE-281
 Improper Preservation of Permissions 		CVE-2020-8117 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
196814 7.3 HIGH
Network 		dot-prop_project dot-prop Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as … CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-8116 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
196815 6.1 MEDIUM
Network 		revive-adserver revive_adserver A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery script of Revive Adserver <= 5.0.3 by Jacopo Tediosi. There are currently no known exploits: the session … CWE-79
Cross-site Scripting 		CVE-2020-8115 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
196816 9.8 CRITICAL
Network 		phpabook_project phpabook An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can login as any user without a password. CWE-287
Improper Authentication 		CVE-2020-8510 2024-11-21 14:38 2020-02-4 Show GitHub Exploit DB Packet Storm
196817 4.3 MEDIUM
Network 		prototypejs prototype Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field. CWE-862
 Missing Authorization 		CVE-2020-7993 2024-11-21 14:38 2020-02-4 Show GitHub Exploit DB Packet Storm
196818 9.8 CRITICAL
Network 		norman malware_cleaner nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled. CWE-787
 Out-of-bounds Write 		CVE-2020-8508 2024-11-21 14:38 2020-02-3 Show GitHub Exploit DB Packet Storm
196819 6.1 MEDIUM
Network 		maxum rumpus An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functiona… CWE-79
Cross-site Scripting 		CVE-2020-8514 2024-11-21 14:38 2020-02-3 Show GitHub Exploit DB Packet Storm
196820 5.3 MEDIUM
Network 		torproject tor The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to di… NVD-CWE-noinfo
CVE-2020-8516 2024-11-21 14:38 2020-02-2 Show GitHub Exploit DB Packet Storm