Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227401 6.4 警告 Xine - xine-lib の input/libreal/rmff.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0225 2012-12-20 18:34 2008-01-10 Show GitHub Exploit DB Packet Storm
227402 7.5 危険 runcms - RunCMS の Newbb_plus モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0224 2012-12-20 18:34 2008-01-10 Show GitHub Exploit DB Packet Storm
227403 7.5 危険 WordPress.org - WordPress 用の Wp-FileManager プラグインにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0222 2012-12-20 18:34 2008-01-10 Show GitHub Exploit DB Packet Storm
227404 6.4 警告 uebimiau - Uebimiau Webmail における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-0210 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227405 5.8 警告 snitz forums 2000 - Snitz Forums 2000 の Forums/login.asp におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0209 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227406 4.3 警告 snitz forums 2000 - Snitz Forums 2000 の login.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0208 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227407 4.3 警告 pro search - PRO-Search におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0207 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227408 4.3 警告 WordPress.org - WordPress 用の Captcha! プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0206 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227409 4.3 警告 WordPress.org - WordPress 用の Math Comment Spam Protection プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0205 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227410 4.3 警告 WordPress.org - WordPress 用の Math Comment Spam Protection プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0204 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200501 9.8 CRITICAL
Network 		sonar-wrapper_project sonar-wrapper This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js. CWE-77
Command Injection 		CVE-2020-28443 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200502 9.8 CRITICAL
Network 		conf-cfg-ini_project conf-cfg-ini This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This … CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-28441 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200503 9.8 CRITICAL
Network 		deferred-exec_project deferred-exec This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js CWE-77
Command Injection 		CVE-2020-28438 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200504 9.8 CRITICAL
Network 		google-cloudstorage-commands_project google-cloudstorage-commands This affects all versions of package google-cloudstorage-commands. CWE-77
Command Injection 		CVE-2020-28436 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200505 9.8 CRITICAL
Network 		ffmpeg-sdk_project ffmpeg-sdk This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js. CWE-77
Command Injection 		CVE-2020-28435 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200506 7.8 HIGH
Local 		git-archive_project git-archive All versions of package git-archive are vulnerable to Command Injection via the exports function. CWE-77
Command Injection 		CVE-2020-28422 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200507 9.8 CRITICAL
Network 		form form.io A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was … CWE-74
Injection 		CVE-2020-28246 2024-11-21 14:22 2022-06-2 Show GitHub Exploit DB Packet Storm
200508 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-28604 2024-11-21 14:22 2022-04-19 Show GitHub Exploit DB Packet Storm
200509 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-28603 2024-11-21 14:22 2022-04-19 Show GitHub Exploit DB Packet Storm
200510 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-28602 2024-11-21 14:22 2022-04-19 Show GitHub Exploit DB Packet Storm