Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227901	7.5	危険	quidascript	-	APB の view_group.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6007	2012-12-20 19:10	2009-01-30	Show	GitHub Exploit DB Packet Storm

227902	10	危険	W3C	-	W3C Amaya Web Browser の CheckUniqueName 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-6005	2012-12-20 19:10	2009-01-28	Show	GitHub Exploit DB Packet Storm

227903	7.1	危険	web-cp	-	web-cp の sendfile.php における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6002	2012-12-20 19:10	2009-01-28	Show	GitHub Exploit DB Packet Storm

227904	4.3	警告	TYPO3 Association	-	TYPO3 用の freeCap CAPTCHA エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5995	2012-12-20 19:10	2009-01-28	Show	GitHub Exploit DB Packet Storm

227905	6.8	警告	phpcounter	-	PHPcounter の defs.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5989	2012-12-20 19:10	2009-01-28	Show	GitHub Exploit DB Packet Storm

227906	5	警告	Webkit	-	WebKit の WebCore における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-6059	2012-12-20 19:10	2008-11-18	Show	GitHub Exploit DB Packet Storm

227907	6	警告	tangocms	-	TangoCMS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-6048	2012-12-20 19:10	2008-12-16	Show	GitHub Exploit DB Packet Storm

227908	7.5	危険	PreProject.com	-	PHP JOBWEBSITE PRO の siteadmin/forgot.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5977	2012-12-20 19:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

227909	4.3	警告	PreProject.com	-	PHP JOBWEBSITE PRO の siteadmin/forgot.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5976	2012-12-20 19:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

227910	7.5	危険	sunbyte	-	Sunbyte e-Flower の popupproduct.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5969	2012-12-20 19:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201641	7.0	HIGH Local	devolutions	gfwx	An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36211	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201642	7.8	HIGH Local	autorand_project	autorand	An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption.	CWE-787 CWE-908 Out-of-bounds Write Use of Uninitialized Resource	CVE-2020-36210	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201643	7.0	HIGH Local	late-static_project	late-static	An issue was discovered in the late-static crate before 0.4.0 for Rust. Because Sync is implemented for LateStatic with T: Send, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36209	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201644	7.8	HIGH Local	conquer-once_project	conquer-once	An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sync type, leading to memory corruption.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36208	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201645	7.0	HIGH Local	aovec_project	aovec	An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36207	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201646	7.0	HIGH Local	rusb_project	rusb	An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36206	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201647	5.5	MEDIUM Local	xcb_project	xcb	An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.	CWE-415 CWE-416 Double Free Use After Free	CVE-2020-36205	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201648	4.7	MEDIUM Local	im_project	im	An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36204	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201649	4.7	MEDIUM Local	reffers_project	reffers	An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption.	CWE-362 CWE-787 Race Condition Out-of-bounds Write	CVE-2020-36203	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201650	6.1	MEDIUM Network	rust-lang	async-h1	An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.	CWE-79 Cross-site Scripting	CVE-2020-36202	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed