Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227641 7.5 危険 pyxicom - Joomla! 用の actualite モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4617 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227642 5 警告 the spanner
WordPress.org		 - WordPress の SpamBam プラグインにおける制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4616 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227643 10 危険 portalapp - PortalApp の i_utils.asp における脆弱性 CWE-noinfo
情報不足 		CVE-2008-4615 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227644 7.5 危険 portalapp - PortalApp におけるトピックなどを作成および削除される脆弱性 CWE-287
不適切な認証 		CVE-2008-4614 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227645 7.5 危険 portalapp - PortalApp の forums.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4613 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227646 4.3 警告 portalapp - PortalApp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4612 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227647 6.5 警告 qualityunit - Post Affiliate Pro の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4602 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
227648 7.5 危険 steve dawson - PokerMax Poker League Tournament Script の configure.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4600 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
227649 10 危険 slaytanic scripts - Slaytanic Scripts Content Plus における脆弱性 CWE-noinfo
情報不足 		CVE-2008-4595 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
227650 10 危険 sportspanel - Sports Clubs Web Panel の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4592 2012-12-20 18:52 2008-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209591 6.6 MEDIUM
Network 		spice_project
redhat
canonical
debian
opensuse 		spice
enterprise_linux
ubuntu_linux
debian_linux
enterprise_linux_eus
leap
enterprise_linux_aus
openstack
enterprise_linux_tus
enterprise_linux_update_services_for_sap_solu… 		Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affe… CWE-120
Classic Buffer Overflow 		CVE-2020-14355 2024-11-21 14:03 2020-10-8 Show GitHub Exploit DB Packet Storm
209592 8.8 HIGH
Local 		dpdk
opensuse
canonical 		data_plane_development_kit
leap
ubuntu_linux 		A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to wri… - CVE-2020-14374 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209593 3.3 LOW
Local 		dpdk
opensuse
canonical 		data_plane_development_kit
leap
ubuntu_linux 		An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could c… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2020-14378 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209594 7.1 HIGH
Local 		dpdk
canonical
opensuse 		data_plane_development_kit
ubuntu_linux
leap 		A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read a… - CVE-2020-14377 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209595 7.8 HIGH
Local 		dpdk
opensuse
canonical 		data_plane_development_kit
leap
ubuntu_linux 		A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. … CWE-120
Classic Buffer Overflow 		CVE-2020-14376 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209596 7.8 HIGH
Local 		dpdk
opensuse
canonical 		data_plane_development_kit
leap
ubuntu_linux 		A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and … CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-14375 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209597 5.3 MEDIUM
Network 		podman_project
redhat
fedoraproject 		podman
enterprise_linux
openshift_container_platform
fedora 		An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are cr… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2020-14370 2024-11-21 14:03 2020-09-23 Show GitHub Exploit DB Packet Storm
209598 7.1 HIGH
Local 		redhat
debian 		ansible_tower
ansible_engine
ceph_storage
openstack_platform
debian_linux 		A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during … - CVE-2020-14365 2024-11-21 14:03 2020-09-23 Show GitHub Exploit DB Packet Storm
209599 3.5 LOW
Adjacent 		philips clinical_collaboration_platform Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage… NVD-CWE-Other
CVE-2020-14525 2024-11-21 14:03 2020-09-19 Show GitHub Exploit DB Packet Storm
209600 4.3 MEDIUM
Network 		philips clinical_collaboration_platform Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to… - CVE-2020-14506 2024-11-21 14:03 2020-09-19 Show GitHub Exploit DB Packet Storm