Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226861 7.5 危険 tigris - WebSVN の utils.inc における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5920 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
226862 6.8 警告 tigris - WebSVN の rss.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5919 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
226863 4.3 警告 tigris - WebSVN の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5918 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
226864 7.5 危険 xrdp - xrdp の rdp/rdp_rdp.c における脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5904 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
226865 7.5 危険 xrdp - xrdp の xrdp/funcs.c における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2008-5903 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
226866 7.5 危険 xrdp - xrdp の xrdp/xrdp_bitmap.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5902 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
226867 5 警告 Tincan - phplist におけるファイルをインクルードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5887 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
226868 5 警告 takempis - TAKempis Discussion Web におけるパスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5886 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
226869 5 警告 the net guys - The Net Guys ASPired2Quote におけるユーザ名などを含むデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5885 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
226870 4.3 警告 zkesoft - AyeView におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-5884 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210841 8.8 HIGH
Network 		primekey ejbca An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. A Cross Site Request Forgery (CSRF) issue has been found in the CA UI. CWE-352
 Origin Validation Error 		CVE-2020-11627 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
210842 6.1 MEDIUM
Network 		primekey ejbca An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. Two Cross Side Scripting (XSS) vulnerabilities have been found in the Public Web and the Certificate/CRL download servlets. CWE-79
Cross-site Scripting 		CVE-2020-11626 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
210843 9.8 CRITICAL
Network 		opsramp gateway OpsRamp Gateway before 7.0.0 has a backdoor account vadmin with the password 9vt@f3Vt that allows root SSH access to the server. This issue has been resolved in OpsRamp Gateway firmware version 7.0.0… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-11543 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
210844 8.1 HIGH
Network 		fasterxml
debian
netapp
oracle 		jackson-databind
debian_linux
steelstore_cloud_integrated_storage
active_iq_unified_manager
retail_xstore_point_of_service
primavera_unifier
weblogic_server
retail_merchandising_… 		FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly). CWE-502
 Deserialization of Untrusted Data 		CVE-2020-11620 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
210845 8.1 HIGH
Network 		fasterxml
debian
netapp
oracle 		jackson-databind
debian_linux
steelstore_cloud_integrated_storage
active_iq_unified_manager
retail_xstore_point_of_service
primavera_unifier
weblogic_server
retail_merchandising_… 		FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-11619 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
210846 6.1 MEDIUM
Network 		wpleadplus wp_lead_plus_x An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-pos… CWE-79
Cross-site Scripting 		CVE-2020-11509 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
210847 5.4 MEDIUM
Network 		wpleadplus wp_lead_plus_x An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbit… CWE-79
Cross-site Scripting 		CVE-2020-11508 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
210848 7.5 HIGH
Network 		netty
debian
fedoraproject
netapp
oracle 		netty
debian_linux
fedora
oncommand_workflow_automation
oncommand_insight
oncommand_api_services
webcenter_portal
nosql_database
communications_messaging_server
communicati… 		The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty serve… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-11612 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
210849 6.1 MEDIUM
Network 		cross_domain_local_storage_project cross_domain_local_storage An issue was discovered in xdLocalStorage through 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the… CWE-601
Open Redirect 		CVE-2020-11611 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
210850 8.8 HIGH
Network 		cross_domain_local_storage_project cross_domain_local_storage An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() funct… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-11610 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm