Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226981	6.8	警告	phpprofiles	-	phpProfiles の include/body_comm.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1051	2012-12-20 18:34	2008-02-27	Show	GitHub Exploit DB Packet Storm

226982	7.5	危険	softbiz	-	Softbiz Jokes & Funny Pics Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1050	2012-12-20 18:34	2008-02-27	Show	GitHub Exploit DB Packet Storm

226983	10	危険	positive software	-	Parallels H-Sphere で使用される Parallels SiteStudio における脆弱性	CWE-noinfo 情報不足	CVE-2008-1049	2012-12-20 18:34	2008-02-26	Show	GitHub Exploit DB Packet Storm

226984	4.3	警告	Plume CMS	-	Plume CMS の manager/xmedia.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1048	2012-12-20 18:34	2008-02-27	Show	GitHub Exploit DB Packet Storm

226985	4.3	警告	Tiki Software Community Association	-	TikiWiki の tiki-edit_article.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1047	2012-12-20 18:34	2008-02-23	Show	GitHub Exploit DB Packet Storm

226986	6.8	警告	quinsonnas	-	Quinsonnas Mail Checker の footer.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1046	2012-12-20 18:34	2008-02-27	Show	GitHub Exploit DB Packet Storm

226987	7.5	危険	porar	-	PORAR WEBBOARD の question.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1039	2012-12-20 18:34	2008-02-27	Show	GitHub Exploit DB Packet Storm

226988	5.8	警告	spyce	-	Spyce - PSP における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2008-0982	2012-12-20 18:34	2008-02-25	Show	GitHub Exploit DB Packet Storm

226989	6.4	警告	spyce	-	Spyce - PSP の spyce/examples/redirect.spy におけるオープンリダイレクトの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0981	2012-12-20 18:34	2008-02-25	Show	GitHub Exploit DB Packet Storm

226990	4.3	警告	spyce	-	Spyce - PSP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0980	2012-12-20 18:34	2008-02-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198061	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.	CWE-125 Out-of-bounds Read	CVE-2020-36279	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

198062	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.	CWE-125 Out-of-bounds Read	CVE-2020-36278	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

198063	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2020-36277	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

198064	7.5	HIGH Network	identitymodel_project	identitymodel	An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.	NVD-CWE-noinfo	CVE-2020-36255	2024-11-21 14:29	2021-03-5	Show	GitHub Exploit DB Packet Storm

198065	5.3	MEDIUM Network	atlassian	crowd	The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF d…	NVD-CWE-noinfo	CVE-2020-36240	2024-11-21 14:29	2021-03-2	Show	GitHub Exploit DB Packet Storm

198066	8.1	HIGH Network	dropbear_ssh_project	dropbear_ssh	scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.	NVD-CWE-noinfo	CVE-2020-36254	2024-11-21 14:29	2021-02-25	Show	GitHub Exploit DB Packet Storm

198067	5.0	MEDIUM Network	atlassian	atlassian-gadgets	The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-36232	2024-11-21 14:29	2021-02-23	Show	GitHub Exploit DB Packet Storm

198068	4.6	MEDIUM Physics	owncloud	owncloud	The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from thi…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-36248	2024-11-21 14:29	2021-02-19	Show	GitHub Exploit DB Packet Storm

198069	5.7	MEDIUM Adjacent	owncloud	owncloud	ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number.	CWE-330 Use of Insufficiently Random Values	CVE-2020-36252	2024-11-21 14:29	2021-02-19	Show	GitHub Exploit DB Packet Storm

198070	4.3	MEDIUM Network	owncloud	owncloud	ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove everyone else's access to that share.	NVD-CWE-noinfo	CVE-2020-36251	2024-11-21 14:29	2021-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed