Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227631	10	危険	Matthias Wandel	-	Matthias Wandel jhead の jhead.c における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4641	2012-12-20 18:52	2008-10-21	Show	GitHub Exploit DB Packet Storm

227632	3.6	注意	Matthias Wandel	-	Matthias Wandel jhead の jhead.c における任意のファイルを削除される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4640	2012-12-20 18:52	2008-10-21	Show	GitHub Exploit DB Packet Storm

227633	4.6	警告	Matthias Wandel	-	Matthias Wandel jhead の jhead.c における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-4639	2012-12-20 18:52	2008-10-21	Show	GitHub Exploit DB Packet Storm

227634	7.5	危険	rgallery	-	WBB 用の rGallery プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4627	2012-12-20 18:52	2008-10-20	Show	GitHub Exploit DB Packet Storm

227635	6.8	警告	zirkon box	-	Fritz Berger yappa-ng の yappa-ng におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4626	2012-12-20 18:52	2008-10-20	Show	GitHub Exploit DB Packet Storm

227636	7.5	危険	shiftthis	-	WordPress 用の ShiftThis Newsletter プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4625	2012-12-20 18:52	2008-10-20	Show	GitHub Exploit DB Packet Storm

227637	5	警告	Wireshark	-	Wireshark の Bluetooth ACL 解析子におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-4683	2012-12-20 18:52	2007-04-4	Show	GitHub Exploit DB Packet Storm

227638	7.5	危険	phpfastnews	-	phpFastNews の fastnews-code.php における認証を迂回される脆弱性	CWE-287 不適切な認証	CVE-2008-4622	2012-12-20 18:52	2008-10-20	Show	GitHub Exploit DB Packet Storm

227639	7.5	危険	ZeeScripts.com	-	ZeeScripts Zeeproperty の bannerclick.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4621	2012-12-20 18:52	2008-10-20	Show	GitHub Exploit DB Packet Storm

227640	10	危険	サン・マイクロシステムズ	-	Sun Solaris の RPC サブシステムにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2008-4619	2012-12-20 18:52	2008-10-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209591	6.6	MEDIUM Network	spice_project redhat canonical debian opensuse	spice enterprise_linux ubuntu_linux debian_linux enterprise_linux_eus leap enterprise_linux_aus openstack enterprise_linux_tus enterprise_linux_update_services_for_sap_solu…	Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affe…	CWE-120 Classic Buffer Overflow	CVE-2020-14355	2024-11-21 14:03	2020-10-8	Show	GitHub Exploit DB Packet Storm

209592	8.8	HIGH Local	dpdk opensuse canonical	data_plane_development_kit leap ubuntu_linux	A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to wri…	-	CVE-2020-14374	2024-11-21 14:03	2020-10-1	Show	GitHub Exploit DB Packet Storm

209593	3.3	LOW Local	dpdk opensuse canonical	data_plane_development_kit leap ubuntu_linux	An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could c…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-14378	2024-11-21 14:03	2020-10-1	Show	GitHub Exploit DB Packet Storm

209594	7.1	HIGH Local	dpdk canonical opensuse	data_plane_development_kit ubuntu_linux leap	A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read a…	-	CVE-2020-14377	2024-11-21 14:03	2020-10-1	Show	GitHub Exploit DB Packet Storm

209595	7.8	HIGH Local	dpdk opensuse canonical	data_plane_development_kit leap ubuntu_linux	A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. …	CWE-120 Classic Buffer Overflow	CVE-2020-14376	2024-11-21 14:03	2020-10-1	Show	GitHub Exploit DB Packet Storm

209596	7.8	HIGH Local	dpdk opensuse canonical	data_plane_development_kit leap ubuntu_linux	A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and …	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-14375	2024-11-21 14:03	2020-10-1	Show	GitHub Exploit DB Packet Storm

209597	5.3	MEDIUM Network	podman_project redhat fedoraproject	podman enterprise_linux openshift_container_platform fedora	An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are cr…	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2020-14370	2024-11-21 14:03	2020-09-23	Show	GitHub Exploit DB Packet Storm

209598	7.1	HIGH Local	redhat debian	ansible_tower ansible_engine ceph_storage openstack_platform debian_linux	A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during …	-	CVE-2020-14365	2024-11-21 14:03	2020-09-23	Show	GitHub Exploit DB Packet Storm

209599	3.5	LOW Adjacent	philips	clinical_collaboration_platform	Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage…	NVD-CWE-Other	CVE-2020-14525	2024-11-21 14:03	2020-09-19	Show	GitHub Exploit DB Packet Storm

209600	4.3	MEDIUM Network	philips	clinical_collaboration_platform	Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to…	-	CVE-2020-14506	2024-11-21 14:03	2020-09-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed