Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226511	7.5	危険	PreProject.com	-	PHP JOBWEBSITE PRO の siteadmin/forgot.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5977	2012-12-20 19:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

226512	4.3	警告	PreProject.com	-	PHP JOBWEBSITE PRO の siteadmin/forgot.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5976	2012-12-20 19:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

226513	7.5	危険	sunbyte	-	Sunbyte e-Flower の popupproduct.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5969	2012-12-20 19:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

226514	7.5	危険	phpicalendar	-	PHP iCalendar の print.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5968	2012-12-20 19:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

226515	7.5	危険	phpicalendar	-	PHP iCalendar の admin/index.php における任意のコンテンツを含むカレンダーファイルをアップロードされる脆弱性	CWE-287 不適切な認証	CVE-2008-5967	2012-12-20 19:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

226516	4.3	警告	Tribal Ltd.	-	Tribiq CMS Community の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5961	2012-12-20 19:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

226517	7.5	危険	Tribal Ltd.	-	Tribiq CMS Community の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5960	2012-12-20 19:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

226518	5	警告	phpstreet	-	Wbstreet におけるデータベースの資格情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5956	2012-12-20 19:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

226519	7.5	危険	phpstreet	-	Wbstreet の show.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5955	2012-12-20 19:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

226520	7.5	危険	tiddlywiki	-	ccTiddly における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-5949	2012-12-20 19:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211161	6.6	MEDIUM Physics	redhat	openshift_container_platform	A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at rest is enabled. This flaw allows an attacker with access to a backup to obtain OA…	-	CVE-2020-10706	2024-11-21 13:55	2020-05-12	Show	GitHub Exploit DB Packet Storm

211162	5.5	MEDIUM Local	redhat debian	ansible_tower ansible_engine ceph_storage openstack storage debian_linux	A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 an…	CWE-459 Incomplete Cleanup	CVE-2020-10685	2024-11-21 13:55	2020-05-11	Show	GitHub Exploit DB Packet Storm

211163	6.4	MEDIUM Local	linux redhat debian canonical opensuse netapp	linux_kernel enterprise_linux debian_linux ubuntu_linux leap element_software steelstore_cloud_integrated_storage solidfire hci_management_node active_iq_unified_manager	There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp…	CWE-416 Use After Free	CVE-2020-10690	2024-11-21 13:55	2020-05-9	Show	GitHub Exploit DB Packet Storm

211164	9.8	CRITICAL Network	advantech	webaccess	Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, …	CWE-787 Out-of-bounds Write	CVE-2020-10638	2024-11-21 13:55	2020-05-8	Show	GitHub Exploit DB Packet Storm

211165	7.5	HIGH Network	samba fedoraproject opensuse debian	samba fedora leap debian_linux	A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user ca…	CWE-674 Uncontrolled Recursion	CVE-2020-10704	2024-11-21 13:55	2020-05-6	Show	GitHub Exploit DB Packet Storm

211166	5.3	MEDIUM Network	redhat ibm quarkus oracle	hibernate_validator websphere_application_server jboss_enterprise_application_platform satellite_capsule satellite quarkus weblogic_server	A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attack…	-	CVE-2020-10693	2024-11-21 13:55	2020-05-6	Show	GitHub Exploit DB Packet Storm

211167	9.1	CRITICAL Network	sae-it	net-line_fw-50_firmware	SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible.	CWE-22 Path Traversal	CVE-2020-10634	2024-11-21 13:55	2020-05-6	Show	GitHub Exploit DB Packet Storm

211168	6.1	MEDIUM Network	sae-it	net-line_fw-50_firmware	SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is serve…	CWE-79 Cross-site Scripting	CVE-2020-10630	2024-11-21 13:55	2020-05-6	Show	GitHub Exploit DB Packet Storm

211169	6.5	MEDIUM Local	qemu	qemu	A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version >= v5.0. Virtio-fs is meant to share a host file system directory with a guest…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-10717	2024-11-21 13:55	2020-05-5	Show	GitHub Exploit DB Packet Storm

211170	5.3	MEDIUM Network	samba fedoraproject opensuse	samba fedora leap	A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause de…	CWE-416 Use After Free	CVE-2020-10700	2024-11-21 13:55	2020-05-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed