Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228171 7.5 危険 WordPress.org - WordPress の wp-db-backup.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0194 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228172 4.3 警告 WordPress.org - WordPress の wp-db-backup.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0193 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228173 4.3 警告 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0192 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228174 5 警告 WordPress.org - WordPress における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0191 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228175 7.5 危険 spacial audio solutions - SAM Broadcaster samPHPweb の songinfo.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0187 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228176 4.3 警告 phprisk - NetRisk の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0186 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228177 6.4 警告 prenotazioni on line - Line System 上で稼動している Sys-Hotel における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0184 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228178 4.3 警告 Plone Foundation - Plone CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-0164 2012-12-20 18:34 2008-03-14 Show GitHub Exploit DB Packet Storm
228179 7.2 危険 sam lantinga - splitvt の misc.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0162 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
228180 5 警告 shop-script - Shop-Script の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0158 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196161 7.2 HIGH
Network 		joyent
oracle 		json
commerce_guided_search
timesten_in-memory_database
financial_services_regulatory_reporting_with_agilereporter
financial_services_crime_and_compliance_management_studio 		This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function. CWE-78
OS Command  		CVE-2020-7712 2024-11-21 14:37 2020-08-30 Show GitHub Exploit DB Packet Storm
196162 4.8 MEDIUM
Network 		mcafee application_and_change_control Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the … CWE-79
Cross-site Scripting 		CVE-2020-7309 2024-11-21 14:37 2020-08-26 Show GitHub Exploit DB Packet Storm
196163 6.5 MEDIUM
Network 		ericssonlg ipecs A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission. The vulnerability is due to insecure permission when hand… CWE-276
Incorrect Default Permissions  		CVE-2020-7824 2024-11-21 14:37 2020-08-26 Show GitHub Exploit DB Packet Storm
196164 7.5 HIGH
Network 		rapid7 metasploit The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbit… CWE-22
Path Traversal 		CVE-2020-7377 2024-11-21 14:37 2020-08-25 Show GitHub Exploit DB Packet Storm
196165 9.8 CRITICAL
Network 		rapid7 metasploit The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to write arbitrary files to… CWE-22
Path Traversal 		CVE-2020-7376 2024-11-21 14:37 2020-08-25 Show GitHub Exploit DB Packet Storm
196166 8.1 HIGH
Network 		mintegral mintegraladsdk This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2020-7705 2024-11-21 14:37 2020-08-25 Show GitHub Exploit DB Packet Storm
196167 8.8 HIGH
Network 		inogard ebiz4u A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via direct… CWE-494
 Download of Code Without Integrity Check 		CVE-2020-7831 2024-11-21 14:37 2020-08-25 Show GitHub Exploit DB Packet Storm
196168 7.5 HIGH
Network 		goxmldsig_project goxmldsig This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures. CWE-476
 NULL Pointer Dereference 		CVE-2020-7711 2024-11-21 14:37 2020-08-23 Show GitHub Exploit DB Packet Storm
196169 9.8 CRITICAL
Network 		safe-eval_project safe-eval This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine. CWE-94
Code Injection 		CVE-2020-7710 2024-11-21 14:37 2020-08-21 Show GitHub Exploit DB Packet Storm
196170 6.9 MEDIUM
Local 		mcafee total_protection Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via man… CWE-269
 Improper Privilege Management 		CVE-2020-7310 2024-11-21 14:37 2020-08-21 Show GitHub Exploit DB Packet Storm