Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228071 7.5 危険 SAP - SAP GUI および SAPSprint に含まれる SAPLPD におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0621 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
228072 10 危険 SAP - SAP GUI および SAPSprint に含まれる SAPLPD におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-0620 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
228073 7.5 危険 rmsoft
XOOPS		 - XOOPS 用の RMSOFT Gallery System モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0611 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
228074 9.3 危険 UltraVNC - UltraVNC 用の vncviewer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0610 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
228075 6.8 警告 xlight ftp server - XLight FTP Server の LDAP 認証機能におけるアクセス制限を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-0604 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
228076 4.3 警告 Skype Technologies S.A. - Windows 上で稼動する Skype の Internet Explorer Web コントロールにおけるクロスゾーンスクリプティングの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0583 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
228077 4.3 警告 Skype Technologies S.A. - Windows 上で稼動する Skype の Internet Explorer Web コントロールにおけるクロスゾーンスクリプティングの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0582 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
228078 4.3 警告 トリップワイヤ - Tripwire Enterprise の Web 管理ログインページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0578 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
228079 4.3 警告 webSPELL - webSPELL の admin/admincenter.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-0575 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
228080 4.3 警告 webSPELL - webSPELL の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0574 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196281 5.4 MEDIUM
Network 		fortinet fortiisolator An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross site scripting attack (XSS). CWE-79
Cross-site Scripting 		CVE-2020-6643 2024-11-21 14:36 2020-03-13 Show GitHub Exploit DB Packet Storm
196282 6.5 MEDIUM
Network 		hotels styx Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header. CWE-74
Injection 		CVE-2020-6858 2024-11-21 14:36 2020-03-12 Show GitHub Exploit DB Packet Storm
196283 7.8 HIGH
Local 		mcafee advanced_threat_defense Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls o… CWE-269
 Improper Privilege Management 		CVE-2020-7254 2024-11-21 14:36 2020-03-12 Show GitHub Exploit DB Packet Storm
196284 4.4 MEDIUM
Local 		mcafee agent Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line u… CWE-20
 Improper Input Validation  		CVE-2020-7253 2024-11-21 14:36 2020-03-12 Show GitHub Exploit DB Packet Storm
196285 7.5 HIGH
Network 		python urllib3 The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. The percent… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-7212 2024-11-21 14:36 2020-03-7 Show GitHub Exploit DB Packet Storm
196286 7.5 HIGH
Network 		omron plc_cj1_firmware
plc_cj2_firmware 		In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in turn causes a PLC se… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-6986 2024-11-21 14:36 2020-03-6 Show GitHub Exploit DB Packet Storm
196287 7.8 HIGH
Local 		emerson valvelink In Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability in the ValveLink software may allow a local, unprivileged, trusted insider to escalate privileges due to insecure configuration parameters. CWE-269
 Improper Privilege Management 		CVE-2020-6971 2024-11-21 14:36 2020-03-6 Show GitHub Exploit DB Packet Storm
196288 7.5 HIGH
Network 		hp oneview_global_dashboard HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE OneView Global Dashboard - After Upgrade or Install of OVGD Version 1.9, Appliance Firewall May Leave Po… CWE-200
Information Exposure 		CVE-2020-7130 2024-11-21 14:36 2020-03-5 Show GitHub Exploit DB Packet Storm
196289 8.8 HIGH
Network 		mozilla
canonical 		firefox
ubuntu_linux 		Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl… CWE-787
 Out-of-bounds Write 		CVE-2020-6801 2024-11-21 14:36 2020-03-2 Show GitHub Exploit DB Packet Storm
196290 8.8 HIGH
Network 		mozilla firefox
firefox_esr 		A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially … CWE-787
 Out-of-bounds Write 		CVE-2020-6796 2024-11-21 14:36 2020-03-2 Show GitHub Exploit DB Packet Storm