Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226991 6.8 警告 tru-zone - Tru-Zone Nuke ET の Journal モジュールにおける任意のユーザアカウントへのアクセス権を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2134 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
226992 4.3 警告 tru-zone - Tru-Zone Nuke ET の Journal モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2133 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
226993 7.5 危険 systementor - Systementor PostcardMentor の step1.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2132 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
226994 4.3 警告 tux cms - Tux CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2126 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
226995 4.3 警告 SAP - SAP ITS の WGate におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2123 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
226996 7.5 危険 project alumni - Project Alumni の info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2118 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
226997 4.3 警告 project alumni - Project Alumni の pages/news.page.inc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2117 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
226998 4.4 警告 Scriptsez.net - ScriptsEZ.net Power Editor の editor.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2116 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
226999 4.3 警告 Scriptsez.net - ScriptsEZ.net Power Editor の editor.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2115 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
227000 7.5 危険 PreProject.com - Pre Shopping Mall の emall/search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2114 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199921 6.5 MEDIUM
Network 		outsystems outsystems An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An unauthenticated attacker can upload arbitrary files. In some cases, this attack may consume the available… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-29441 2024-11-21 14:24 2020-12-1 Show GitHub Exploit DB Packet Storm
199922 4.6 MEDIUM
Physics 		tesla model_x_firmware Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module (BCM). This allows an attacker (who is inside a veh… CWE-295
Improper Certificate Validation  		CVE-2020-29440 2024-11-21 14:24 2020-12-1 Show GitHub Exploit DB Packet Storm
199923 4.6 MEDIUM
Physics 		tesla model_x_firmware Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module (BCM) to initiate a Bluetooth wake-up action. (The full VIN… NVD-CWE-noinfo
CVE-2020-29439 2024-11-21 14:24 2020-12-1 Show GitHub Exploit DB Packet Storm
199924 6.5 MEDIUM
Adjacent 		tesla model_x_firmware Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers to construct firmware that retrieves an unlock code from a se… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-29438 2024-11-21 14:24 2020-12-1 Show GitHub Exploit DB Packet Storm
199925 3.3 LOW
Local 		paloaltonetworks pan-os An information exposure through log file vulnerability exists where the password for the configured system proxy server for a PAN-OS appliance may be displayed in cleartext when using the CLI in Palo… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-2048 2024-11-21 14:24 2020-11-12 Show GitHub Exploit DB Packet Storm
199926 7.2 HIGH
Network 		paloaltonetworks pan-os An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authenticated administrators to disrupt system processes and potentially execute arbitra… CWE-78
OS Command  		CVE-2020-2000 2024-11-21 14:24 2020-11-12 Show GitHub Exploit DB Packet Storm
199927 8.2 HIGH
Network 		paloaltonetworks pan-os An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an inva… CWE-287
Improper Authentication 		CVE-2020-2050 2024-11-21 14:24 2020-11-12 Show GitHub Exploit DB Packet Storm
199928 7.5 HIGH
Network 		paloaltonetworks pan-os An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Panorama web interface administrator's session to a managed device when the Panor… CWE-269
 Improper Privilege Management 		CVE-2020-2022 2024-11-21 14:24 2020-11-12 Show GitHub Exploit DB Packet Storm
199929 7.2 HIGH
Network 		paloaltonetworks pan-os A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. Thi… CWE-120
Classic Buffer Overflow 		CVE-2020-2042 2024-11-21 14:24 2020-09-10 Show GitHub Exploit DB Packet Storm
199930 7.5 HIGH
Network 		paloaltonetworks pan-os An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb servic… NVD-CWE-Other
CVE-2020-2041 2024-11-21 14:24 2020-09-10 Show GitHub Exploit DB Packet Storm