Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227201 7.5 危険 silcnet - SILC Toolkit の lib/silcutil/silcutil.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1227 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227202 4.3 警告 webct - WebCT Campus Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1225 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227203 7.5 危険 PHPNUKE - PHP-Nuke 用の 4nChat における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1220 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227204 7.5 危険 PHPNUKE - PHP-Nuke 用の KutubiSitte モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1219 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227205 4.3 警告 podcast generator - Podcast Generator の set_permissions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1212 2012-12-20 18:34 2008-03-7 Show GitHub Exploit DB Packet Storm
227206 9.3 危険 pnotepad - Programmer's Notepad の ctags parsing コードにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1210 2012-12-20 18:34 2008-03-7 Show GitHub Exploit DB Packet Storm
227207 4.3 警告 xitex - Xitex WebContent M1 の redirect.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1209 2012-12-20 18:34 2008-03-7 Show GitHub Exploit DB Packet Storm
227208 4.3 警告 サン・マイクロシステムズ - Sun Java System Access Manager の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1204 2012-12-20 18:34 2008-02-27 Show GitHub Exploit DB Packet Storm
227209 7.1 危険 レッドハット - Red Hat Enterprise Linux のデフォルト IPSec ifup スクリプトにおける総当り攻撃を実行される脆弱性 CWE-16
環境設定
CVE-2008-1198 2012-12-20 18:34 2008-02-28 Show GitHub Exploit DB Packet Storm
227210 4.3 警告 torrenttrader - TorrentTrader Classic の TorrentTrader Classic におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1173 2012-12-20 18:34 2008-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200101 4.3 MEDIUM
Network
jenkins health_advisor_by_cloudbees A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient. CWE-862
 Missing Authorization
CVE-2020-2094 2024-11-21 14:24 2020-01-16 Show GitHub Exploit DB Packet Storm
200102 8.8 HIGH
Network
jenkins health_advisor_by_cloudbees A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient. CWE-352
 Origin Validation Error
CVE-2020-2093 2024-11-21 14:24 2020-01-16 Show GitHub Exploit DB Packet Storm
200103 8.8 HIGH
Network
jenkins robot_framework Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing users with Job/Configure to have Jenkins parse crafted XML do… CWE-611
XXE
CVE-2020-2092 2024-11-21 14:24 2020-01-16 Show GitHub Exploit DB Packet Storm
200104 8.1 HIGH
Network
jenkins amazon_ec2 A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL within the AWS region using attacker-spe… CWE-862
 Missing Authorization
CVE-2020-2091 2024-11-21 14:24 2020-01-16 Show GitHub Exploit DB Packet Storm
200105 8.8 HIGH
Network
jenkins amazon_ec2 A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specified URL within the AWS region using attacker-specified creden… CWE-352
 Origin Validation Error
CVE-2020-2090 2024-11-21 14:24 2020-01-16 Show GitHub Exploit DB Packet Storm
200106 9.8 CRITICAL
Network
leeco letv_x43_firmware An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). NVD-CWE-noinfo
CVE-2020-28715 2024-11-21 14:23 2023-08-21 Show GitHub Exploit DB Packet Storm
200107 5.4 MEDIUM
Network
churchcrm churchcrm Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive information via crafted payload in Add New Deposit field in Vi… CWE-79
Cross-site Scripting
CVE-2020-28849 2024-11-21 14:23 2023-08-11 Show GitHub Exploit DB Packet Storm
200108 8.8 HIGH
Network
churchcrm churchcrm CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file. CWE-74
Injection
CVE-2020-28848 2024-11-21 14:23 2023-08-11 Show GitHub Exploit DB Packet Storm
200109 7.8 HIGH
Local
matthiaswandel jhead Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service (DoS). CWE-120
Classic Buffer Overflow
CVE-2020-28840 2024-11-21 14:23 2023-08-11 Show GitHub Exploit DB Packet Storm
200110 6.1 MEDIUM
Network
kindsoft kindeditor Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code. CWE-79
Cross-site Scripting
CVE-2020-28717 2024-11-21 14:23 2023-08-11 Show GitHub Exploit DB Packet Storm