Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227341 7.5 危険 turnkey web tools - Turnkey PHP Live Helper の globalsoff.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-3764 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
227342 6.8 警告 turnkey web tools - Turnkey PHP Live Helper の libsecure.php における db config ファイルに関連する任意の変数を上書きされる脆弱性 CWE-20
不適切な入力確認
CVE-2008-3763 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
227343 7.5 危険 turnkey web tools - Turnkey PHP Live Helper の onlinestatus_html.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3762 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
227344 7.5 危険 YourFreeWorld.com - YourFreeWorld Forced Matrix Script の tr1.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3757 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
227345 7.5 危険 YourFreeWorld.com - YourFreeWorld Viral Marketing Script の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3756 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
227346 7.5 危険 YourFreeWorld.com - YourFreeWorld Classifieds Script の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3755 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
227347 7.5 危険 YourFreeWorld.com - YourFreeWorld Stylish Text Ads Script の trl.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3754 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
227348 7.5 危険 YourFreeWorld.com - YourFreeWorld Programs Rating Script の details.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3753 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
227349 7.5 危険 YourFreeWorld.com - YourFreeWorld Ad-Exchange Script の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3752 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
227350 7.5 危険 YourFreeWorld.com - YourFreeWorld Short Url & Url Tracker Script の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3751 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196331 8.8 HIGH
Network
schneider-electric scadapack_7x_remote_connect A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to executable code folders. NVD-CWE-Other
CVE-2020-7530 2024-11-21 14:37 2020-09-17 Show GitHub Exploit DB Packet Storm
196332 5.5 MEDIUM
Local
schneider-electric scadapack_7x_remote_connect A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place … - CVE-2020-7529 2024-11-21 14:37 2020-09-17 Show GitHub Exploit DB Packet Storm
196333 7.8 HIGH
Local
schneider-electric scadapack_7x_remote_connect A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ… - CVE-2020-7528 2024-11-21 14:37 2020-09-17 Show GitHub Exploit DB Packet Storm
196334 7.5 HIGH
Network
ua-parser-js_project
oracle
ua-parser-js
communications_cloud_native_core_network_function_cloud_native_environment
The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-7733 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196335 5.7 MEDIUM
Adjacent
mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user inter… CWE-287
Improper Authentication
CVE-2020-7297 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196336 5.7 MEDIUM
Adjacent
mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user … CWE-287
Improper Authentication
CVE-2020-7296 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196337 4.6 MEDIUM
Adjacent
mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the use… CWE-287
Improper Authentication
CVE-2020-7295 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196338 4.6 MEDIUM
Adjacent
mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST i… CWE-287
Improper Authentication
CVE-2020-7294 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196339 9.0 CRITICAL
Adjacent
mcafee web_gateway Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access co… CWE-287
Improper Authentication
CVE-2020-7293 2024-11-21 14:37 2020-09-16 Show GitHub Exploit DB Packet Storm
196340 5.5 MEDIUM
Local
lg ipsfullhd
lg_ultrawide
lgpcsuite_setup
ultra_hd_driver_setup
A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) installation into a DLL file that the hacker wants. Missing … CWE-354
 Improper Validation of Integrity Check Value
CVE-2020-7807 2024-11-21 14:37 2020-09-14 Show GitHub Exploit DB Packet Storm