Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226991 4.3 警告 TWiki - TWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5304 2012-12-20 18:52 2008-11-18 Show GitHub Exploit DB Packet Storm
226992 7.6 危険 vitalwerks - No-IP DUC におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5297 2012-12-20 18:52 2008-12-1 Show GitHub Exploit DB Packet Storm
226993 7.5 危険 videogirls - VideoGirls BiZ の view_snaps.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5292 2012-12-20 18:52 2008-12-1 Show GitHub Exploit DB Packet Storm
226994 4.3 警告 scripts4you - Werner Hilversum Clean CMS の full_txt.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5290 2012-12-20 18:52 2008-12-1 Show GitHub Exploit DB Packet Storm
226995 7.5 危険 scripts4you - Werner Hilversum Clean CMS の full_txt.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5289 2012-12-20 18:52 2008-12-1 Show GitHub Exploit DB Packet Storm
226996 6.8 警告 scripts4you - Werner Hilversum FAQ Manager の include/header.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5288 2012-12-20 18:52 2008-12-1 Show GitHub Exploit DB Packet Storm
226997 7.5 危険 scripts4you - Werner Hilversum FAQ Manager の catagorie.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5287 2012-12-20 18:52 2008-12-1 Show GitHub Exploit DB Packet Storm
226998 10 危険 W3C - W3C Amaya Web Browser におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5282 2012-12-20 18:52 2008-11-28 Show GitHub Exploit DB Packet Storm
226999 10 危険 south river technologies - Titan FTP Server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5281 2012-12-20 18:52 2008-11-28 Show GitHub Exploit DB Packet Storm
227000 5 警告 zilab - ZIM Server の Local ZIM Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5280 2012-12-20 18:52 2008-11-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210241 6.8 MEDIUM
Network 		arubanetworks edgeconnect_enterprise The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, al… CWE-78
OS Command  		CVE-2020-12149 2024-11-21 13:59 2020-12-12 Show GitHub Exploit DB Packet Storm
210242 6.8 MEDIUM
Network 		arubanetworks edgeconnect_enterprise A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web serv… CWE-78
OS Command  		CVE-2020-12148 2024-11-21 13:59 2020-12-12 Show GitHub Exploit DB Packet Storm
210243 4.9 MEDIUM
Network 		broadcom symantec_messaging_gateway An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. Thi… NVD-CWE-noinfo
CVE-2020-12595 2024-11-21 13:59 2020-12-10 Show GitHub Exploit DB Packet Storm
210244 7.2 HIGH
Network 		broadcom symantec_messaging_gateway A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 1… NVD-CWE-noinfo
CVE-2020-12594 2024-11-21 13:59 2020-12-10 Show GitHub Exploit DB Packet Storm
210245 7.5 HIGH
Network 		wago 750-352_firmware
750-831_firmware
750-852_firmware
750-880_firmware
750-881_firmware
750-889_firmware
750-331_firmware
750-829_firmware
750-882_firmware
750-885_firmware 		Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. NVD-CWE-noinfo
CVE-2020-12516 2024-11-21 13:59 2020-12-10 Show GitHub Exploit DB Packet Storm
210246 7.5 HIGH
Network 		phoenixcontact btp_2043w_firmware
btp_2070w_firmware
btp_2102w_firmware 		Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display co… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-12524 2024-11-21 13:59 2020-12-3 Show GitHub Exploit DB Packet Storm
210247 3.3 LOW
Local 		apache cordova We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who could install (or lead the victim to install) a specially craft… NVD-CWE-noinfo
CVE-2020-11990 2024-11-21 13:59 2020-12-2 Show GitHub Exploit DB Packet Storm
210248 5.4 MEDIUM
Network 		intelbras tip200_firmware
tip200lite_firmware
tip300_firmware 		Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS. CWE-79
Cross-site Scripting 		CVE-2020-12262 2024-11-21 13:59 2020-11-27 Show GitHub Exploit DB Packet Storm
210249 6.5 MEDIUM
Adjacent 		linux linux_kernel Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access. CWE-909
 Missing Initialization of Resource 		CVE-2020-12352 2024-11-21 13:59 2020-11-24 Show GitHub Exploit DB Packet Storm
210250 8.8 HIGH
Adjacent 		linux linux_kernel Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. CWE-20
 Improper Input Validation  		CVE-2020-12351 2024-11-21 13:59 2020-11-24 Show GitHub Exploit DB Packet Storm