Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226871 7.5 危険 PilotCart - ASPilot Pilot Cart の pilot.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2688 2012-12-20 18:52 2008-06-13 Show GitHub Exploit DB Packet Storm
226872 7.5 危険 promanager - ProManager の inc/config.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2687 2012-12-20 18:52 2008-06-13 Show GitHub Exploit DB Packet Storm
226873 7.5 危険 realm project - Realm CMS の _RealmAdmin/login.asp における 認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2682 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
226874 5 警告 realm project - Realm CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2681 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
226875 4.3 警告 realm project - Realm CMS の _db/compact.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2680 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
226876 7.5 危険 realm project - Realm CMS の _includes/inc_routines.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2679 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
226877 7.5 危険 telephone - Telephone Directory 2008 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2678 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
226878 4.3 警告 telephone - Telephone Directory 2008 の edit1.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2677 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
226879 4.3 警告 softcomplex - PHP Image Gallery の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2675 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
226880 7.5 危険 Powie - Powie pNews の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2673 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197101 8.1 HIGH
Network 		ibm spectrum_virtualize
flashsystem_v5000_firmware
flashsystem_v7200_firmware
flashsystem_v9000_firmware
flashsystem_v9100_firmware
flashsystem_v9200_firmware
san_volume_controller_firm… 		IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678. NVD-CWE-noinfo
CVE-2020-4686 2024-11-21 14:33 2020-08-17 Show GitHub Exploit DB Packet Storm
197102 8.8 HIGH
Network 		ibm event_streams IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233. CWE-287
Improper Authentication 		CVE-2020-4662 2024-11-21 14:33 2020-08-14 Show GitHub Exploit DB Packet Storm
197103 5.5 MEDIUM
Local 		ibm spectrum_protect_plus IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-4631 2024-11-21 14:33 2020-08-5 Show GitHub Exploit DB Packet Storm
197104 5.4 MEDIUM
Network 		ibm planning_analytics_local IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended f… CWE-79
Cross-site Scripting 		CVE-2020-4645 2024-11-21 14:33 2020-07-29 Show GitHub Exploit DB Packet Storm
197105 5.4 MEDIUM
Network 		ibm planning_analytics_local IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker c… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2020-4644 2024-11-21 14:33 2020-07-29 Show GitHub Exploit DB Packet Storm
197106 7.8 HIGH
Local 		sonicwall netextender SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. T… CWE-20
 Improper Input Validation  		CVE-2020-5131 2024-11-21 14:33 2020-07-18 Show GitHub Exploit DB Packet Storm
197107 5.3 MEDIUM
Network 		sonicwall sonicos SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n … CWE-20
 Improper Input Validation  		CVE-2020-5130 2024-11-21 14:33 2020-07-18 Show GitHub Exploit DB Packet Storm
197108 6.5 MEDIUM
Network 		traccar traccar Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can… CWE-74
Injection 		CVE-2020-5246 2024-11-21 14:33 2020-07-15 Show GitHub Exploit DB Packet Storm
197109 6.5 MEDIUM
Network 		dell powerprotect_data_manager
powerprotect_x400_firmware 		Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user ma… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2020-5356 2024-11-21 14:33 2020-07-7 Show GitHub Exploit DB Packet Storm
197110 8.8 HIGH
Network 		dell emc_data_protection_advisor Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on… CWE-78
OS Command  		CVE-2020-5352 2024-11-21 14:33 2020-07-7 Show GitHub Exploit DB Packet Storm