Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227051	10	危険	tintin	-	TinTin++ および WinTin++ の add_line_buffer 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0671	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

227052	4.3	警告	sift	-	Sift Unity の search.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0669	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

227053	3.6	注意	website meta language	-	WML における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-0666	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

227054	3.6	注意	website meta language	-	WML の wml_backend/p1_ipp/ipp.src における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-0665	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

227055	6.4	警告	WordPress.org	-	WordPress の XML-RPC 実装における他のブログユーザの投稿を編集される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0664	2012-12-20 18:34	2008-02-5	Show	GitHub Exploit DB Packet Storm

227056	7.5	危険	simple os cms	-	Simple OS CMS の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0650	2012-12-20 18:34	2008-02-7	Show	GitHub Exploit DB Packet Storm

227057	7.5	危険	portail web php	-	Portail Web Php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-0645	2012-12-20 18:34	2008-02-7	Show	GitHub Exploit DB Packet Storm

227058	10	危険	シマンテック	-	Symantec Ghost Solution Suite における任意のコマンドを実行される脆弱性	CWE-287 不適切な認証	CVE-2008-0640	2012-12-20 18:34	2008-02-7	Show	GitHub Exploit DB Packet Storm

227059	9.3	危険	シマンテック	-	Symantec Veritas Storage Foundation の VEA サービスにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0638	2012-12-20 18:34	2008-02-20	Show	GitHub Exploit DB Packet Storm

227060	7.5	危険	sejoong namo	-	Sejoong Namo ActiveSquare で使用される NamoInstaller.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0634	2012-12-20 18:34	2008-02-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198111	4.3	MEDIUM Network	vasyltech	advanced_access_manager	The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/authenticate or aam/v2/authenticate). Th…	CWE-200 Information Exposure	CVE-2020-35934	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198112	6.5	MEDIUM Network	thenewsletterplugin	newsletter	A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a tnpc_render AJAX req…	CWE-79 Cross-site Scripting	CVE-2020-35933	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198113	8.8	HIGH Network	tribulant	newsletter	Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to …	CWE-502 Deserialization of Untrusted Data	CVE-2020-35932	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198114	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can spoof a certified PDF…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-35931	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198115	5.4	MEDIUM Network	seopanel	seo_panel	Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI.	CWE-79 Cross-site Scripting	CVE-2020-35930	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198116	4.7	MEDIUM Local	atom_project	atom	An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race.	CWE-362 Race Condition	CVE-2020-35897	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198117	7.5	HIGH Network	ws-rs_project	ws-rs	An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-35896	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198118	9.8	CRITICAL Network	stack_project	stack	An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion.	CWE-787 Out-of-bounds Write	CVE-2020-35895	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198119	7.5	HIGH Network	obstack_project	obstack	An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur.	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2020-35894	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198120	7.5	HIGH Network	simple-slab_project	simple-slab	An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory leakage and a drop of uninitialized memory.	CWE-193 CWE-401 CWE-908 Off-by-one Error Missing Release of Memory after Effective Lifetime Use of Uninitialized Resource	CVE-2020-35893	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed