Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226831 7.5 危険 SoftbizScripts - Softbiz Jokes & Funny Pics Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2874 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
226832 7.5 危険 sharecms - ShareCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2870 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
226833 6.8 警告 webchamado - WebChamado の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2858 2012-12-20 18:52 2008-06-25 Show GitHub Exploit DB Packet Storm
226834 7.5 危険 softdivision - Maxtrade AIO の Trade モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2847 2012-12-20 18:52 2008-06-25 Show GitHub Exploit DB Packet Storm
226835 4.3 警告 traindepot - Traindepot の search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2839 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
226836 5 警告 traindepot - Traindepot の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2838 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
226837 7.5 危険 sidb - Scientific Image DataBase の projects.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2834 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
226838 10 危険 worldlevel - le.cms の admin/upload.php における管理者の認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-2833 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
226839 10 危険 tmsnc - tmsnc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2828 2012-12-20 18:52 2008-06-23 Show GitHub Exploit DB Packet Storm
226840 4.3 警告 Xerox - Xerox WorkCentre M123 などの組込み Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2825 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211071 7.8 HIGH
Local 		google android In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege wi… CWE-862
 Missing Authorization 		CVE-2020-0475 2024-11-21 13:53 2020-12-16 Show GitHub Exploit DB Packet Storm
211072 7.0 HIGH
Local 		google android In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges ne… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2020-0474 2024-11-21 13:53 2020-12-16 Show GitHub Exploit DB Packet Storm
211073 4.6 MEDIUM
Physics 		google android In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical … CWE-863
 Incorrect Authorization 		CVE-2020-0473 2024-11-21 13:53 2020-12-16 Show GitHub Exploit DB Packet Storm
211074 3.3 LOW
Local 		google android In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execu… CWE-20
 Improper Input Validation  		CVE-2020-0368 2024-11-21 13:53 2020-12-16 Show GitHub Exploit DB Packet Storm
211075 5.5 MEDIUM
Local 		google android In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privil… CWE-125
Out-of-bounds Read 		CVE-2020-0280 2024-11-21 13:53 2020-12-16 Show GitHub Exploit DB Packet Storm
211076 5.5 MEDIUM
Local 		google android In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no clear exfiltration path,… CWE-125
Out-of-bounds Read 		CVE-2020-0244 2024-11-21 13:53 2020-12-16 Show GitHub Exploit DB Packet Storm
211077 9.8 CRITICAL
Network 		google android There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843 CWE-787
 Out-of-bounds Write 		CVE-2020-0456 2024-11-21 13:53 2020-12-15 Show GitHub Exploit DB Packet Storm
211078 5.5 MEDIUM
Local 		google android In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privilege… CWE-787
 Out-of-bounds Write 		CVE-2020-0470 2024-11-21 13:53 2020-12-15 Show GitHub Exploit DB Packet Storm
211079 5.5 MEDIUM
Local 		google android In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of service with no additional execution privilege… NVD-CWE-noinfo
CVE-2020-0469 2024-11-21 13:53 2020-12-15 Show GitHub Exploit DB Packet Storm
211080 5.5 MEDIUM
Local 		google android In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information dis… CWE-862
 Missing Authorization 		CVE-2020-0468 2024-11-21 13:53 2020-12-15 Show GitHub Exploit DB Packet Storm