Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227001	4.3	警告	schoolwires	-	Schoolwires Academic Portal の browse.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0909	2012-12-20 18:34	2008-02-22	Show	GitHub Exploit DB Packet Storm

227002	7.5	危険	schoolwires	-	browse.asp の Schoolwires Academic Portal における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0908	2012-12-20 18:34	2008-02-22	Show	GitHub Exploit DB Packet Storm

227003	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Inhalt モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0907	2012-12-20 18:34	2008-02-22	Show	GitHub Exploit DB Packet Storm

227004	7.5	危険	PHPNUKE	-	PHP-Nuke の Docum モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0906	2012-12-20 18:34	2008-02-22	Show	GitHub Exploit DB Packet Storm

227005	7.5	危険	レッドハット	-	Red Hat Directory Server で使用されている Red Hat Administration Server における管理者操作を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0893	2012-12-20 18:34	2008-04-15	Show	GitHub Exploit DB Packet Storm

227006	4.6	警告	レッドハット	-	Red Hat Directory Server における JAR ファイルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0890	2012-12-20 18:34	2008-03-11	Show	GitHub Exploit DB Packet Storm

227007	2.1	注意	レッドハット	-	Red Hat Directory Server における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0889	2012-12-20 18:34	2008-03-19	Show	GitHub Exploit DB Packet Storm

227008	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Okul モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0881	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

227009	7.5	危険	PHPNUKE	-	PHP-Nuke 用の EasyContent モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0880	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

227010	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Web_Links モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0879	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198111	5.5	MEDIUM Local	xcb_project	xcb	An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.	CWE-415 CWE-416 Double Free Use After Free	CVE-2020-36205	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198112	4.7	MEDIUM Local	im_project	im	An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36204	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198113	4.7	MEDIUM Local	reffers_project	reffers	An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption.	CWE-362 CWE-787 Race Condition Out-of-bounds Write	CVE-2020-36203	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198114	6.1	MEDIUM Network	rust-lang	async-h1	An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.	CWE-79 Cross-site Scripting	CVE-2020-36202	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198115	6.5	MEDIUM Network	kaspersky	tinycheck	TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-36200	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198116	9.8	CRITICAL Network	kaspersky	tinycheck	TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.	CWE-20 CWE-78 Improper Input Validation OS Command	CVE-2020-36199	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198117	7.5	HIGH Network	xerox	workcentre_3655_firmware workcentre_3655i_firmware workcentre_5865_firmware workcentre_5875_firmware workcentre_5890_firmware workcentre_5865i_firmware workcentre_5875i_firmware …	An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 79…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-36201	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198118	7.5	HIGH Network	cskaza	cszcms	SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php.	CWE-89 SQL Injection	CVE-2020-36136	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

198119	5.5	MEDIUM Local	foxit	pdf_reader	Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attackers to cause a denial of service (DoS) vi…	CWE-120 Classic Buffer Overflow	CVE-2020-35990	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

198120	7.5	HIGH Network	ffmpeg	ffmpeg	An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS).	CWE-476 NULL Pointer Dereference	CVE-2020-36138	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed