Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226931 6.5 警告 phpstore - PHPStore Complete Classifieds における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6928 2012-12-20 19:10 2009-08-11 Show GitHub Exploit DB Packet Storm
226932 4.3 警告 Zenphoto - Zenphoto の function.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6925 2012-12-20 19:10 2009-08-10 Show GitHub Exploit DB Packet Storm
226933 9.3 危険 Youngzsoft - CMailServer の CMailCOM.dll におけるスタックベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-6922 2012-12-20 19:10 2009-08-10 Show GitHub Exploit DB Packet Storm
226934 7.5 危険 w2b - phpAdBoard の index.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6921 2012-12-20 19:10 2009-08-10 Show GitHub Exploit DB Packet Storm
226935 7.5 危険 w2b - phpEmployment の auth.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6920 2012-12-20 19:10 2009-08-10 Show GitHub Exploit DB Packet Storm
226936 7.5 危険 taskdriver - profileedit.php TaskDriver における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6919 2012-12-20 19:10 2009-08-10 Show GitHub Exploit DB Packet Storm
226937 6.8 警告 theportal2.pl - ThePortal2 の admin/galeria.php における任意の PHP コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6918 2012-12-20 19:10 2009-08-10 Show GitHub Exploit DB Packet Storm
226938 4.3 警告 zeeways - Zeeways ZEEPROPERTY の view_prop_details.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6915 2012-12-20 19:10 2009-08-7 Show GitHub Exploit DB Packet Storm
226939 6.5 警告 zeeways - Zeeways ZEEPROPERTY の viewprofile.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6914 2012-12-20 19:10 2009-08-7 Show GitHub Exploit DB Packet Storm
226940 6.5 警告 zeeways - Zeeways ZEEJOBSITE の editresume_next.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-6913 2012-12-20 19:10 2009-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201001 5.3 MEDIUM
Network
google android An issue was discovered in the GPS daemon on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (non-Qualcomm chipsets) software. Attackers can obtain sensitive location information because the … NVD-CWE-noinfo
CVE-2020-35552 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201002 9.8 CRITICAL
Network
google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. They allow attackers to conduct RPMB state-change attacks because an unauthorized RPMB w… CWE-294
Authentication Bypass by Capture-replay 
CVE-2020-35551 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201003 9.8 CRITICAL
Network
google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset Protection (FRP) via StatusBar. The Samsung ID is SVE-2020-178… NVD-CWE-noinfo
CVE-2020-35550 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201004 5.5 MEDIUM
Local
google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establish itself as the default dialer, without user interaction. The Samsung ID is SV… NVD-CWE-noinfo
CVE-2020-35549 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201005 5.5 MEDIUM
Local
google android An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 (D… NVD-CWE-noinfo
CVE-2020-35548 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201006 5.3 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the vi… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-35480 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201007 6.1 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is alway… CWE-79
Cross-site Scripting
CVE-2020-35479 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201008 6.1 MEDIUM
Network
mediawiki
fedoraproject
mediawiki
fedora
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki … CWE-79
Cross-site Scripting
CVE-2020-35478 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201009 5.3 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggl… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2020-35477 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201010 7.5 HIGH
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to ch… CWE-79
Cross-site Scripting
CVE-2020-35475 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm