Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226911 7.5 危険 phprisk - NetRisk における任意のユーザのパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7155 2012-12-20 19:10 2009-09-2 Show GitHub Exploit DB Packet Storm
226912 6.8 警告 Simon Rycroft - SID における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-7152 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
226913 10 危険 synfig - Synfig Animation Studio における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-7148 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
226914 10 危険 RARLAB - RARLAB WinRAR における脆弱性 CWE-noinfo
情報不足 		CVE-2008-7144 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
226915 6.8 警告 phpBB - phpBB におけるセッションをハイジャックされる脆弱性 CWE-200
情報漏えい 		CVE-2008-7143 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
226916 4.3 警告 redgalaxy - Chris LaPointe RedGalaxy Download Center のデフォルト URI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7134 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
226917 5 警告 xyssl - XySSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7129 2012-12-20 19:10 2009-08-31 Show GitHub Exploit DB Packet Storm
226918 7.5 危険 xyssl - XySSL の ssl_parse_client_key_exchange 関数における鍵を回復される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7128 2012-12-20 19:10 2009-08-31 Show GitHub Exploit DB Packet Storm
226919 7.5 危険 zkup - zKup CMS における管理者権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-7124 2012-12-20 19:10 2009-08-31 Show GitHub Exploit DB Packet Storm
226920 6.8 警告 zkup - zKup CMS の admin/configuration/modifier.php における任意の PHP コード挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-7123 2012-12-20 19:10 2009-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210171 4.8 MEDIUM
Network 		tufin securechange Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be trigg… CWE-79
Cross-site Scripting 		CVE-2020-13134 2024-11-21 14:00 2021-01-20 Show GitHub Exploit DB Packet Storm
210172 6.1 MEDIUM
Network 		tufin securechange Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be trigg… CWE-79
Cross-site Scripting 		CVE-2020-13133 2024-11-21 14:00 2021-01-20 Show GitHub Exploit DB Packet Storm
210173 5.4 MEDIUM
Network 		carbonite server_backup_portal OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation. CWE-79
Cross-site Scripting 		CVE-2020-13116 2024-11-21 14:00 2021-01-13 Show GitHub Exploit DB Packet Storm
210174 9.8 CRITICAL
Network 		gssproxy_project
debian 		gssproxy
debian_linux 		gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when runn… CWE-667
 Improper Locking 		CVE-2020-12658 2024-11-21 14:00 2020-12-31 Show GitHub Exploit DB Packet Storm
210175 7.8 HIGH
Local 		amd vbios_flash_tool_software_development_kit A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system. NVD-CWE-noinfo
CVE-2020-12927 2024-11-21 14:00 2020-11-13 Show GitHub Exploit DB Packet Storm
210176 6.4 MEDIUM
Physics 		amd trusted_platform_modules_reference The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in a state where confidential key material in the TP… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-12926 2024-11-21 14:00 2020-11-13 Show GitHub Exploit DB Packet Storm
210177 5.5 MEDIUM
Local 		amd energy_driver_for_linux A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks.… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-12912 2024-11-21 14:00 2020-11-13 Show GitHub Exploit DB Packet Storm
210178 9.8 CRITICAL
Network 		westerndigital my_cloud_firmware Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devi… CWE-787
 Out-of-bounds Write 		CVE-2020-12830 2024-11-21 14:00 2020-10-28 Show GitHub Exploit DB Packet Storm
210179 7.5 HIGH
Network 		arista cloudvision_exchange Arista’s CloudVision eXchange (CVX) server before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (crash and res… NVD-CWE-noinfo
CVE-2020-13100 2024-11-21 14:00 2020-10-27 Show GitHub Exploit DB Packet Storm
210180 5.5 MEDIUM
Local 		amd atikmdag.sys A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTEscape API request can cause an out-… CWE-125
Out-of-bounds Read 		CVE-2020-12933 2024-11-21 14:00 2020-10-14 Show GitHub Exploit DB Packet Storm