Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228021 7.5 危険 runcms - RunCMS 用の MyAnnonces モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0878 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
228022 4.3 警告 SmarterTools Inc. - SmarterTools SmarterMail Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0872 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
228023 7.5 危険 woltlab - WoltLab Burning Board の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0857 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
228024 7.5 危険 WordPress.org - WordPress 用の Dean Logan WP-People プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0845 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
228025 6.4 警告 statcountex - StatCounteX における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0843 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
228026 4.4 警告 publicwarehouse - Public Warehouse LightBlog の view_member.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0840 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
228027 4.3 警告 ソフォス - Sophos ES1000 および ES4000 Email Security Appliance の Web の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0838 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
228028 7.5 危険 simple cms - Simple CMS の indexen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0835 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
228029 7.5 危険 PHPNUKE - PHP-Nuke の Books モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0827 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
228030 3.6 注意 scribe - Scribe の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0822 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209691 9.8 CRITICAL
Network
tendacn ac6_firmware
ac9_firmware
ac15_firmware
ac18_firmware
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devi… CWE-120
Classic Buffer Overflow
CVE-2020-13393 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm
209692 9.8 CRITICAL
Network
tendacn ac6_firmware
ac9_firmware
ac15_firmware
ac18_firmware
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devi… CWE-120
Classic Buffer Overflow
CVE-2020-13392 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm
209693 9.8 CRITICAL
Network
tendacn ac6_firmware
ac9_firmware
ac15_firmware
ac18_firmware
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devi… CWE-120
Classic Buffer Overflow
CVE-2020-13391 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm
209694 9.8 CRITICAL
Network
tendacn ac6_firmware
ac9_firmware
ac15_firmware
ac18_firmware
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devi… CWE-120
Classic Buffer Overflow
CVE-2020-13390 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm
209695 9.8 CRITICAL
Network
tendacn ac6_firmware
ac9_firmware
ac15_firmware
ac18_firmware
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devi… CWE-120
Classic Buffer Overflow
CVE-2020-13389 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm
209696 8.8 HIGH
Network
monstra monstra Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=filesmanager because, for example, .php filenames are blocked but .php7 filenames a… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-13384 2024-11-21 14:01 2020-05-22 Show GitHub Exploit DB Packet Storm
209697 7.8 HIGH
Local
amd enterprise_driver
radeon_pro_software
radeon_software
ryzen_3_2200ge_firmware
ryzen_3_2200g_firmware
ryzen_5_2400ge_firmware
ryzen_5_2400g_firmware
ryzen_3_3100_firmware
ryzen…
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity. NVD-CWE-Other
CVE-2020-12931 2024-11-21 14:00 2022-11-10 Show GitHub Exploit DB Packet Storm
209698 7.8 HIGH
Local
amd enterprise_driver
radeon_pro_software
radeon_software
radeon_rx_vega_56_firmware
radeon_rx_vega_64_firmware
ryzen_3_2200ge_firmware
ryzen_3_2200g_firmware
ryzen_5_2400ge_firmware…
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity. NVD-CWE-Other
CVE-2020-12930 2024-11-21 14:00 2022-11-10 Show GitHub Exploit DB Packet Storm
209699 7.8 HIGH
Local
verint desktop_and_process_analytics The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair. CWE-281
 Improper Preservation of Permissions
CVE-2020-12744 2024-11-21 14:00 2022-10-20 Show GitHub Exploit DB Packet Storm
209700 9.8 CRITICAL
Network
moica hicos Hicos citizen certificate client-side component does not filter special characters for command parameters in specific web URLs. An unauthenticated remote attacker can exploit this vulnerability to pe… CWE-78
OS Command 
CVE-2020-12775 2024-11-21 14:00 2022-03-1 Show GitHub Exploit DB Packet Storm