Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228051 7.5 危険 raknet - RakNet の Autopatcher サーバプラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2523 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
228052 6.5 警告 YABSoft - YABSoft Mega File Hosting Script の members.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2521 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
228053 2.1 注意 sarab - SaraB の sarab.sh スクリプトにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2517 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
228054 5 警告 シマンテック - Symantec Backup Exec System Recovery Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2512 2012-12-20 18:52 2008-05-28 Show GitHub Exploit DB Packet Storm
228055 7.5 危険 WordPress.org - WordPress 用 Upload File プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2510 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
228056 4.3 警告 tr script news - Tr Script News の news.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2508 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
228057 7.5 危険 simpel side - Simpel Side Weblosning における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2506 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
228058 4.3 警告 simpel side - Simpel Side Weblosning の result.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2505 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
228059 7.5 危険 simpel side - Simpel Side Netbutik における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2504 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
228060 9.3 危険 加藤和良 - eMule X-Ray の Uploadlist におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2503 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209451 5.3 MEDIUM
Network 		divebook_project divebook The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker may leverage this issue to manipulate th… CWE-862
 Missing Authorization 		CVE-2020-14205 2024-11-21 14:02 2020-12-9 Show GitHub Exploit DB Packet Storm
209452 6.5 MEDIUM
Network 		apache apisix In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects version… NVD-CWE-Other
CVE-2020-13945 2024-11-21 14:02 2020-12-8 Show GitHub Exploit DB Packet Storm
209453 4.3 MEDIUM
Network 		samba
redhat 		samba
enterprise_linux
storage 		A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be u… - CVE-2020-14318 2024-11-21 14:02 2020-12-4 Show GitHub Exploit DB Packet Storm
209454 5.3 MEDIUM
Network 		apache
quarkus
oracle
netapp 		httpclient
quarkus
primavera_unifier
peoplesoft_enterprise_peopletools
data_integrator
peoplesoft_enterprise_pt_peopletools
nosql_database
retail_customer_management_and_segmenta… 		Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host… NVD-CWE-noinfo
CVE-2020-13956 2024-11-21 14:02 2020-12-3 Show GitHub Exploit DB Packet Storm
209455 9.8 CRITICAL
Network 		hcltech domino HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Domino or execute attacker-control… CWE-120
Classic Buffer Overflow 		CVE-2020-14260 2024-11-21 14:02 2020-12-2 Show GitHub Exploit DB Packet Storm
209456 8.1 HIGH
Network 		linux
netapp 		linux_kernel
cloud_backup
a250_firmware
fas_500f_firmware
aff_500f_firmware
solidfire_baseboard_management_controller_firmware 		An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated… - CVE-2020-14305 2024-11-21 14:02 2020-12-2 Show GitHub Exploit DB Packet Storm
209457 5.4 MEDIUM
Network 		atlassian automation_for_jira Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & <jira-installation>/jira/bin directorie… CWE-74
Injection 		CVE-2020-14193 2024-11-21 14:02 2020-12-1 Show GitHub Exploit DB Packet Storm
209458 5.3 MEDIUM
Network 		intelbras tip200_firmware
tip200lite_firmware
tip300_firmware 		Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal. CWE-22
Path Traversal 		CVE-2020-13886 2024-11-21 14:02 2020-11-27 Show GitHub Exploit DB Packet Storm
209459 7.5 HIGH
Network 		atlassian crucible
fisheye 		Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-14190 2024-11-21 14:02 2020-11-26 Show GitHub Exploit DB Packet Storm
209460 7.5 HIGH
Network 		atlassian crucible
fisheye 		Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the MessageBundleResource within Atlassi… NVD-CWE-noinfo
CVE-2020-14191 2024-11-21 14:02 2020-11-26 Show GitHub Exploit DB Packet Storm