Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227101 7.5 危険 phpkf - phpKF の forum_duzen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6443 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
227102 5.8 警告 sina - Sina Inc. DLoader Class ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2008-6442 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
227103 4.3 警告 phpsqlitecms - phpSQLiteCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6435 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
227104 7.5 危険 psychostats - PsychoStats における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6422 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
227105 7.5 危険 socialsitegenerator - Social Site Generator の social_game_play.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6421 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
227106 5 警告 socialsitegenerator - Social Site Generator における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-6420 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
227107 7.5 危険 socialsitegenerator - Social Site Generator における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6419 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
227108 7.5 危険 torrenttrader - TorrentTrader の scrape.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6418 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
227109 10 危険 Youngzsoft - YoungZSoft CCProxy におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6415 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
227110 7.5 危険 vignette - Vignette Content Management における管理者権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2008-6412 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196331 8.8 HIGH
Network 		schneider-electric scadapack_7x_remote_connect A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to executable code folders. NVD-CWE-Other
CVE-2020-7530 2024-11-21 14:37 2020-09-17 Show GitHub Exploit DB Packet Storm
196332 5.5 MEDIUM
Local 		schneider-electric scadapack_7x_remote_connect A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place … - CVE-2020-7529 2024-11-21 14:37 2020-09-17 Show GitHub Exploit DB Packet Storm
196333 7.8 HIGH
Local 		schneider-electric scadapack_7x_remote_connect A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ… - CVE-2020-7528 2024-11-21 14:37 2020-09-17 Show GitHub Exploit DB Packet Storm
196334 7.5 HIGH
Network 		ua-parser-js_project
oracle 		ua-parser-js
communications_cloud_native_core_network_function_cloud_native_environment 		The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-7733 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196335 5.7 MEDIUM
Adjacent 		mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user inter… CWE-287
Improper Authentication 		CVE-2020-7297 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196336 5.7 MEDIUM
Adjacent 		mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user … CWE-287
Improper Authentication 		CVE-2020-7296 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196337 4.6 MEDIUM
Adjacent 		mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the use… CWE-287
Improper Authentication 		CVE-2020-7295 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196338 4.6 MEDIUM
Adjacent 		mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST i… CWE-287
Improper Authentication 		CVE-2020-7294 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196339 9.0 CRITICAL
Adjacent 		mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access co… CWE-287
Improper Authentication 		CVE-2020-7293 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196340 5.5 MEDIUM
Local 		lg ipsfullhd
lg_ultrawide
lgpcsuite_setup
ultra_hd_driver_setup 		A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) installation into a DLL file that the hacker wants. Missing … CWE-354
 Improper Validation of Integrity Check Value 		CVE-2020-7807 2024-11-21 14:37 2020-09-14 Show GitHub Exploit DB Packet Storm