Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227541 7.5 危険 tiger php news system - TPNS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0469 2012-12-20 18:34 2008-01-29 Show GitHub Exploit DB Packet Storm
227542 5 警告 webwiz - Web Wiz Rich Text Edito などで使用されている Web Wiz RTE_file_browser.asp におけるディレクトリトラバーサルの脆弱性 CWE-287
不適切な認証
CVE-2008-0466 2012-12-20 18:34 2008-01-28 Show GitHub Exploit DB Packet Storm
227543 5 警告 seagullproject.org - Seagull の optimizer.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0465 2012-12-20 18:34 2008-01-25 Show GitHub Exploit DB Packet Storm
227544 6.8 警告 slaed - SLAED CMS の function/sources.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0458 2012-12-20 18:34 2008-01-25 Show GitHub Exploit DB Packet Storm
227545 10 危険 シマンテック - Symantec Backup Exec System Recovery Manager で使用される Symantec LiveState Apache Tomcat サーバで稼動している FileUpload クラスにおける任意の JSP ファイルをアップロードされる脆弱性 CWE-20
不適切な入力確認
CVE-2008-0457 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
227546 5 警告 siteman - Siteman の articles.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0452 2012-12-20 18:34 2008-01-24 Show GitHub Exploit DB Packet Storm
227547 7.5 危険 rocksalt international - VP-ASP Shopping Cart の paypalresult.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0449 2012-12-20 18:34 2008-01-24 Show GitHub Exploit DB Packet Storm
227548 7.5 危険 small axe solutions - Small Axe Weblog の inc/linkbar.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-0442 2012-12-20 18:34 2008-01-24 Show GitHub Exploit DB Packet Storm
227549 6.8 警告 東芝 - Toshiba Surveillance RecordSend ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0399 2012-12-20 18:34 2008-01-23 Show GitHub Exploit DB Packet Storm
227550 6.8 警告 WordPress.org - WordPress 用の WP-Forum プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0388 2012-12-20 18:34 2008-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210281 7.5 HIGH
Network
intel bmc_firmware NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware versions prior to 1.06.06 and all DGX A100 Servers with all BMC firmware versions, contains a vulnerabil… CWE-798
 Use of Hard-coded Credentials
CVE-2020-11487 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
210282 9.8 CRITICAL
Network
intel bmc_firmware NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transfer files that can be… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-11486 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
210283 8.8 HIGH
Network
intel bmc_firmware NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware in which the web application does not suf… CWE-352
 Origin Validation Error
CVE-2020-11485 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
210284 4.9 MEDIUM
Network
intel bmc_firmware NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a vulnerability in the AMI BMC firmware in which an attacker with administrative privileges can obtain the hash of … NVD-CWE-noinfo
CVE-2020-11484 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
210285 9.8 CRITICAL
Network
intel bmc_firmware NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which the firm… CWE-798
 Use of Hard-coded Credentials
CVE-2020-11483 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
210286 7.2 HIGH
Network
concretecms concrete_cms Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-11476 2024-11-21 13:57 2020-07-29 Show GitHub Exploit DB Packet Storm
210287 7.8 HIGH
Local
ncp-e secure_enterprise_client NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant. CWE-59
Link Following
CVE-2020-11474 2024-11-21 13:57 2020-07-29 Show GitHub Exploit DB Packet Storm
210288 7.5 HIGH
Network
windriver vxworks httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. NVD-CWE-noinfo
CVE-2020-11440 2024-11-21 13:57 2020-07-23 Show GitHub Exploit DB Packet Storm
210289 8.8 HIGH
Network
librehealth librehealth_ehr LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR application. CWE-22
Path Traversal
CVE-2020-11439 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
210290 8.8 HIGH
Network
librehealth librehealth_ehr LibreHealth EMR v2.0.0 is affected by systemic CSRF. CWE-352
 Origin Validation Error
CVE-2020-11438 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm