Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228381 10 危険 princeton university - Princeton wn におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-3908 2012-12-20 18:52 2008-09-4 Show GitHub Exploit DB Packet Storm
228382 2.1 注意 suspend2 - Software suspend における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-3901 2012-12-20 18:52 2008-09-3 Show GitHub Exploit DB Packet Storm
228383 2.1 注意 TrueCrypt Foundation - TrueCrypt における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-3899 2012-12-20 18:52 2008-09-3 Show GitHub Exploit DB Packet Storm
228384 2.1 注意 secustar - Secu Star DriveCrypt Plus Pack における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-3898 2012-12-20 18:52 2008-09-3 Show GitHub Exploit DB Packet Storm
228385 10 危険 ZoneMinder - ZoneMinder における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-3882 2012-12-20 18:52 2008-09-2 Show GitHub Exploit DB Packet Storm
228386 4.3 警告 ZoneMinder - ZoneMinder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3881 2012-12-20 18:52 2008-09-2 Show GitHub Exploit DB Packet Storm
228387 7.5 危険 ZoneMinder - ZoneMinder の zm_html_view_event.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3880 2012-12-20 18:52 2008-09-2 Show GitHub Exploit DB Packet Storm
228388 9.3 危険 ultrashareware - Ultra Shareware Ultra Office Control の Ultra.OfficeControl ActiveX コントロールにおけるクライアントシステムに任意のファイルを強制ダウンロードされる脆弱性 CWE-20
不適切な入力確認
CVE-2008-3879 2012-12-20 18:52 2008-09-2 Show GitHub Exploit DB Packet Storm
228389 9.3 危険 ultrashareware - Ultra Shareware Ultra Office Control の Ultra.OfficeControl ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-3878 2012-12-20 18:52 2008-09-2 Show GitHub Exploit DB Packet Storm
228390 10 危険 トレンドマイクロ - Trend Micro OfficeScan のサーバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-3862 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209011 8.8 HIGH
Local
parallels parallels_desktop This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code … - CVE-2020-17392 2024-11-21 14:08 2020-08-26 Show GitHub Exploit DB Packet Storm
209012 9.8 CRITICAL
Network
seowonintech slc-130_firmware
slr-120s_firmware
slr-120s42g_firmware
slr-120d42g_firmware
slr-120t42g_firmware
SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page. CWE-78
OS Command 
CVE-2020-17456 2024-11-21 14:08 2020-08-20 Show GitHub Exploit DB Packet Storm
209013 7.5 HIGH
Network
megvii koala_firmware Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to anyone by sending packet data to UDP port 5000. CWE-306
Missing Authentication for Critical Function
CVE-2020-17475 2024-11-21 14:08 2020-08-15 Show GitHub Exploit DB Packet Storm
209014 9.8 CRITICAL
Network
zkteco zkbiosecurity_server
facedepot_7b_firmware
A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and… CWE-613
 Insufficient Session Expiration
CVE-2020-17474 2024-11-21 14:08 2020-08-15 Show GitHub Exploit DB Packet Storm
209015 5.9 MEDIUM
Network
zkteco zkbiosecurity_server
facedepot_7b_firmware
Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server. CWE-613
 Insufficient Session Expiration
CVE-2020-17473 2024-11-21 14:08 2020-08-15 Show GitHub Exploit DB Packet Storm
209016 7.8 HIGH
Local
cmsmadesimple cms_made_simple CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-17462 2024-11-21 14:08 2020-08-15 Show GitHub Exploit DB Packet Storm
209017 6.5 MEDIUM
Network
wireshark
fedoraproject
opensuse
oracle
wireshark
fedora
leap
zfs_storage_appliance_kit
In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression. CWE-415
 Double Free
CVE-2020-17498 2024-11-21 14:08 2020-08-14 Show GitHub Exploit DB Packet Storm
209018 5.5 MEDIUM
Local
artifex
debian
canonical
ghostscript
debian_linux
ubuntu_linux
A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. Thi… CWE-787
 Out-of-bounds Write
CVE-2020-17538 2024-11-21 14:08 2020-08-13 Show GitHub Exploit DB Packet Storm
209019 6.1 MEDIUM
Network
php-fusion php-fusion PHP-Fusion 9.03 allows XSS on the preview page. CWE-79
Cross-site Scripting
CVE-2020-17450 2024-11-21 14:08 2020-08-13 Show GitHub Exploit DB Packet Storm
209020 5.4 MEDIUM
Network
php-fusion php-fusion PHP-Fusion 9.03 allows XSS via the error_log file. CWE-79
Cross-site Scripting
CVE-2020-17449 2024-11-21 14:08 2020-08-13 Show GitHub Exploit DB Packet Storm