Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228031 3.6 注意 plutostatus - PlutoStatus Locator の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0819 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
228032 6.4 警告 truc - TRUC の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0814 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
228033 5 警告 xpweb - XPWeb の Download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0813 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
228034 9.3 危険 reality - PHPizabi の image.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0805 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
228035 6.8 警告 Thecus - Thecus N5200Pro NAS Server の usrgetform.html における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0804 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
228036 7.5 危険 VWar - VWar の calendar.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0753 2012-12-20 18:34 2008-02-13 Show GitHub Exploit DB Packet Storm
228037 10 危険 ソニー・コンピュータエンタテインメント - Sony ImageStation 用の SonyISUpload.cab におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0748 2012-12-20 18:34 2008-02-13 Show GitHub Exploit DB Packet Storm
228038 7.5 危険 PreProject.com - PreProjects.com Pre Hotels & Resorts Management System の user_login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0744 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228039 7.5 危険 powerscripts - PowerScripts PowerNews におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0742 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228040 7.5 危険 shoppingtree - CP の admin/SA_shipFedExMeter.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0739 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196151 9.8 CRITICAL
Network 		nodemailer nodemailer This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails. CWE-88
Argument Injection 		CVE-2020-7769 2024-11-21 14:37 2020-11-12 Show GitHub Exploit DB Packet Storm
196152 9.8 CRITICAL
Network 		grpc grpc The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-7768 2024-11-21 14:37 2020-11-11 Show GitHub Exploit DB Packet Storm
196153 5.3 MEDIUM
Network 		express-validators_project express-validators All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validating specifically-crafted invalid urls. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-7767 2024-11-21 14:37 2020-11-11 Show GitHub Exploit DB Packet Storm
196154 7.2 HIGH
Network 		mcafee mvision_endpoint Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully co… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-7329 2024-11-21 14:37 2020-11-11 Show GitHub Exploit DB Packet Storm
196155 7.2 HIGH
Network 		mcafee mvision_endpoint External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a resource or trigger arbitrary code execution via impro… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-7328 2024-11-21 14:37 2020-11-11 Show GitHub Exploit DB Packet Storm
196156 9.8 CRITICAL
Network 		json-ptr_project json-ptr This affects all versions of package json-ptr. The issue occurs in the set operation (https://flitbit.github.io/json-ptr/classes/_src_pointer_.jsonpointer.htmlset) when the force flag is set to true.… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-7766 2024-11-21 14:37 2020-11-11 Show GitHub Exploit DB Packet Storm
196157 7.5 HIGH
Network 		find-my-way_project find-my-way This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by default, and if versioned routes are not being used, this could lead to a deni… CWE-444
HTTP Request Smuggling 		CVE-2020-7764 2024-11-21 14:37 2020-11-9 Show GitHub Exploit DB Packet Storm
196158 7.5 HIGH
Network 		jsreport phantom-html-to-pdf This affects the package phantom-html-to-pdf before 0.6.1. CWE-22
Path Traversal 		CVE-2020-7763 2024-11-21 14:37 2020-11-5 Show GitHub Exploit DB Packet Storm
196159 6.5 MEDIUM
Network 		jsreport jsreport-chrome-pdf This affects the package jsreport-chrome-pdf before 1.10.0. CWE-22
Path Traversal 		CVE-2020-7762 2024-11-21 14:37 2020-11-5 Show GitHub Exploit DB Packet Storm
196160 5.3 MEDIUM
Network 		absolunet kafe This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails. NVD-CWE-noinfo
CVE-2020-7761 2024-11-21 14:37 2020-11-5 Show GitHub Exploit DB Packet Storm