Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227261 7.5 危険 webportal - WebPortal CMS の download.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4345 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
227262 6 警告 vacilanda - Drupal 用の Brilliant Gallery モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4338 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
227263 7.5 危険 phpocs - phpOCS の library/pagefunctions.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4331 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
227264 5.8 警告 ViewVC - ViewVC の lib/viewvc.py におけるブラウザにコンテンツを誤って解釈させる脆弱性 CWE-noinfo
情報不足 		CVE-2008-4325 2012-12-20 18:52 2008-06-4 Show GitHub Exploit DB Packet Storm
227265 10 危険 project-observer - Observer における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4318 2012-12-20 18:52 2008-09-29 Show GitHub Exploit DB Packet Storm
227266 9 危険 phpCollab - phpCollab の installation/setup.php における include/settings.php に任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4305 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227267 10 危険 phpCollab - phpCollab の general/login.php における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2008-4304 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227268 6.8 警告 phpCollab - phpCollab における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4303 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227269 6.5 警告 rianxosencabos cms - Rianxosencabos CMS の Admin Control Panel におけるユーザの権限を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4245 2012-12-20 18:52 2008-09-25 Show GitHub Exploit DB Packet Storm
227270 7.5 危険 webcms - webCMS Portal Edition の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4185 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210141 6.8 MEDIUM
Network 		arubanetworks edgeconnect_enterprise The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, al… CWE-78
OS Command  		CVE-2020-12149 2024-11-21 13:59 2020-12-12 Show GitHub Exploit DB Packet Storm
210142 6.8 MEDIUM
Network 		arubanetworks edgeconnect_enterprise A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web serv… CWE-78
OS Command  		CVE-2020-12148 2024-11-21 13:59 2020-12-12 Show GitHub Exploit DB Packet Storm
210143 4.9 MEDIUM
Network 		broadcom symantec_messaging_gateway An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. Thi… NVD-CWE-noinfo
CVE-2020-12595 2024-11-21 13:59 2020-12-10 Show GitHub Exploit DB Packet Storm
210144 7.2 HIGH
Network 		broadcom symantec_messaging_gateway A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 1… NVD-CWE-noinfo
CVE-2020-12594 2024-11-21 13:59 2020-12-10 Show GitHub Exploit DB Packet Storm
210145 7.5 HIGH
Network 		wago 750-352_firmware
750-831_firmware
750-852_firmware
750-880_firmware
750-881_firmware
750-889_firmware
750-331_firmware
750-829_firmware
750-882_firmware
750-885_firmware 		Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. NVD-CWE-noinfo
CVE-2020-12516 2024-11-21 13:59 2020-12-10 Show GitHub Exploit DB Packet Storm
210146 7.5 HIGH
Network 		phoenixcontact btp_2043w_firmware
btp_2070w_firmware
btp_2102w_firmware 		Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display co… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-12524 2024-11-21 13:59 2020-12-3 Show GitHub Exploit DB Packet Storm
210147 3.3 LOW
Local 		apache cordova We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who could install (or lead the victim to install) a specially craft… NVD-CWE-noinfo
CVE-2020-11990 2024-11-21 13:59 2020-12-2 Show GitHub Exploit DB Packet Storm
210148 5.4 MEDIUM
Network 		intelbras tip200_firmware
tip200lite_firmware
tip300_firmware 		Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS. CWE-79
Cross-site Scripting 		CVE-2020-12262 2024-11-21 13:59 2020-11-27 Show GitHub Exploit DB Packet Storm
210149 6.5 MEDIUM
Adjacent 		linux linux_kernel Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access. CWE-909
 Missing Initialization of Resource 		CVE-2020-12352 2024-11-21 13:59 2020-11-24 Show GitHub Exploit DB Packet Storm
210150 8.8 HIGH
Adjacent 		linux linux_kernel Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. CWE-20
 Improper Input Validation  		CVE-2020-12351 2024-11-21 13:59 2020-11-24 Show GitHub Exploit DB Packet Storm