Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226721 7.5 危険 turnkeyforms - TurnkeyForms Business Survey Pro の survey_results_text.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6349 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
226722 4.3 警告 ticklespace - Drupal 用の Answers モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6413 2012-12-20 19:10 2008-09-18 Show GitHub Exploit DB Packet Storm
226723 4.3 警告 sadi samami - Multi Languages WebShop Online の detail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6267 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
226724 6.8 警告 xt:Commerce - xt:Commerce における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6304 2012-12-20 19:10 2008-11-20 Show GitHub Exploit DB Packet Storm
226725 7.5 危険 TYPO3 Association - TYPO3 用の TU-Clausthal Staff エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6344 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226726 4.3 警告 TYPO3 Association - TYPO3 用の TU-Clausthal ODIN エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6343 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226727 4.3 警告 TYPO3 Association - TYPO3 用の SB Universal Plugin エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6341 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226728 7.5 危険 weber-ebusiness - TYPO3 用の WEBERkommunal Facilities エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6338 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226729 4.3 警告 rightscripts - Text Lines Rearrange Script の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6336 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226730 7.5 危険 simplecustomer - Simple Customer の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6332 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196931 9.8 CRITICAL
Network
linuxfoundation the_update_framework TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature. CWE-347
 Improper Verification of Cryptographic Signature
CVE-2020-6174 2024-11-21 14:35 2020-02-6 Show GitHub Exploit DB Packet Storm
196932 7.5 HIGH
Network
minisnmpd_project minisnmpd A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP connections can trigger a stack overflow, resulting in a… CWE-787
 Out-of-bounds Write
CVE-2020-6060 2024-11-21 14:35 2020-02-5 Show GitHub Exploit DB Packet Storm
196933 8.2 HIGH
Network
minisnmpd_project minisnmpd An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which c… CWE-190
 Integer Overflow or Wraparound
CVE-2020-6059 2024-11-21 14:35 2020-02-5 Show GitHub Exploit DB Packet Storm
196934 9.1 CRITICAL
Network
minisnmpd_project minisnmpd An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out-of-bounds memory read, which … CWE-125
Out-of-bounds Read
CVE-2020-6058 2024-11-21 14:35 2020-02-5 Show GitHub Exploit DB Packet Storm
196935 5.3 MEDIUM
Network
linuxfoundation the_update_framework TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-6173 2024-11-21 14:35 2020-01-15 Show GitHub Exploit DB Packet Storm
196936 4.3 MEDIUM
Network
sap basis Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensiti… CWE-863
 Incorrect Authorization
CVE-2020-6307 2024-11-21 14:35 2020-01-15 Show GitHub Exploit DB Packet Storm
196937 2.7 LOW
Network
sap leasing Missing authorization check in a transaction within SAP Leasing (update provided in SAP_APPL 6.18, EA-APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16 and 6.17). CWE-862
 Missing Authorization
CVE-2020-6306 2024-11-21 14:35 2020-01-15 Show GitHub Exploit DB Packet Storm
196938 6.1 MEDIUM
Network
sap process_integration PI Rest Adapter of SAP Process Integration (update provided in SAP_XIAF 7.31, 7.40, 7.50) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. CWE-79
Cross-site Scripting
CVE-2020-6305 2024-11-21 14:35 2020-01-15 Show GitHub Exploit DB Packet Storm
196939 5.4 MEDIUM
Network
sap disclosure_management SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting. CWE-79
Cross-site Scripting
CVE-2020-6303 2024-11-21 14:35 2020-01-15 Show GitHub Exploit DB Packet Storm
196940 8.8 HIGH
Network
google
opensuse
fedoraproject
redhat
debian
chrome
leap
backports_sle
fedora
enterprise_linux_desktop
enterprise_linux_workstation
debian_linux
Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-416
 Use After Free
CVE-2020-6377 2024-11-21 14:35 2020-01-11 Show GitHub Exploit DB Packet Storm