Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228151	7.5	危険	rs maxsoft	-	RS MAXSOFT の fotogalerie モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4912	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228152	10	危険	サン・マイクロシステムズ	-	Sun Java Web Start の BasicService におけるクライアントマシン上で任意のプログラムを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4910	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228153	7.5	危険	w1n78	-	e107 用の Lyrics プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4906	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228154	5	警告	typosphere	-	Typo におけるパスワードを推測される脆弱性	CWE-310 暗号の問題	CVE-2008-4905	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228155	6	警告	typosphere	-	Typo の "ページを管理する" 機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4904	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228156	4.3	警告	typosphere	-	Typo のコメントを残す機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4903	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228157	7.5	危険	scripts frenzy	-	Article Publisher Pro の contact_author.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4902	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228158	7.5	危険	scripts frenzy	-	Article Publisher Pro の admin/admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4901	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228159	9.3	危険	SAP	-	SAP GUI の KWEdit ActiveX コントロールにおける任意のファイルを上書きされる脆弱性	CWE-Other その他	CVE-2008-4830	2012-12-20 18:52	2009-04-16	Show	GitHub Exploit DB Packet Storm

228160	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Classifieds Blaster Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4900	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201631	7.5	HIGH Network	openldap debian apple	openldap debian_linux mac_os_x macos	An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssu…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-36221	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201632	5.9	MEDIUM Network	va-ts_project	va-ts	An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer<T> omits a required T: Send bound, a data race and memory corruption can occur.	CWE-787 CWE-662 CWE-667 Out-of-bounds Write Improper Synchronization Improper Locking	CVE-2020-36220	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201633	5.9	MEDIUM Network	atomic-option_project	atomic-option	An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption<T> implements Sync unconditionally, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36219	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201634	5.9	MEDIUM Network	nonpolynomial	buttplug	An issue was discovered in the buttplug crate before 1.0.4 for Rust. ButtplugFutureStateShared does not properly consider (!Send\|!Sync) objects, leading to a data race.	NVD-CWE-noinfo	CVE-2020-36218	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201635	5.9	MEDIUM Network	may_queue_project	may_queue	An issue was discovered in the may_queue crate through 2020-11-10 for Rust. Because Queue does not have bounds on its Send trait or Sync trait, memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36217	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201636	5.9	MEDIUM Network	petabi	eventio	An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread, a data race and memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36216	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201637	7.5	HIGH Network	hashconsing_project	hashconsing	An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send trait or Sync trait, memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36215	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201638	5.9	MEDIUM Network	multiqueue2_project	multiqueue2	An issue was discovered in the multiqueue2 crate before 0.1.7 for Rust. Because a non-Send type can be sent to a different thread, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36214	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201639	7.5	HIGH Network	abi_stable_project	abi_stable	An issue was discovered in the abi_stable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string, violating soundness.	NVD-CWE-noinfo	CVE-2020-36213	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201640	7.5	HIGH Network	abi_stable_project	abi_stable	An issue was discovered in the abi_stable crate before 0.9.1 for Rust. DrainFilter lacks soundness because of a double drop.	NVD-CWE-noinfo	CVE-2020-36212	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed