Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228391	7.5	危険	phpmyrealty	-	phpMyRealty PMR における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3861	2012-12-20 18:52	2008-08-29	Show	GitHub Exploit DB Packet Storm

228392	5	警告	Pluck CMS	-	Windows 上で稼動する Pluck CMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3851	2012-12-20 18:52	2008-08-27	Show	GitHub Exploit DB Packet Storm

228393	4.9	警告	レッドハット	-	Fedora 上で稼動している Linux カーネルの utrace サブシステム用の特定の Fedora パッチにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-3832	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

228394	5	警告	swfdec	-	Swfdec におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3796	2012-12-20 18:52	2008-08-27	Show	GitHub Exploit DB Packet Storm

228395	6.8	警告	VideoLAN	-	VLC Media Player の modules/access/mms/mmstu.c 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2008-3794	2012-12-20 18:52	2008-08-26	Show	GitHub Exploit DB Packet Storm

228396	6.8	警告	PicturesPro	-	PICTURESPRO Photo Cart における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3788	2012-12-20 18:52	2008-08-26	Show	GitHub Exploit DB Packet Storm

228397	4.3	警告	PicturesPro	-	PICTURESPRO Photo Cart の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3786	2012-12-20 18:52	2008-08-26	Show	GitHub Exploit DB Packet Storm

228398	7.5	危険	review-script	-	Five Star Review Script の recommend.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3780	2012-12-20 18:52	2008-08-26	Show	GitHub Exploit DB Packet Storm

228399	4.3	警告	review-script	-	Five Star Review Script の search/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3779	2012-12-20 18:52	2008-08-26	Show	GitHub Exploit DB Packet Storm

228400	7.5	危険	simasy	-	Simasy CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3774	2012-12-20 18:52	2008-08-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201641	7.0	HIGH Local	devolutions	gfwx	An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36211	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201642	7.8	HIGH Local	autorand_project	autorand	An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption.	CWE-787 CWE-908 Out-of-bounds Write Use of Uninitialized Resource	CVE-2020-36210	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201643	7.0	HIGH Local	late-static_project	late-static	An issue was discovered in the late-static crate before 0.4.0 for Rust. Because Sync is implemented for LateStatic with T: Send, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36209	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201644	7.8	HIGH Local	conquer-once_project	conquer-once	An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sync type, leading to memory corruption.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36208	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201645	7.0	HIGH Local	aovec_project	aovec	An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36207	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201646	7.0	HIGH Local	rusb_project	rusb	An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur.	CWE-787 CWE-662 Out-of-bounds Write Improper Synchronization	CVE-2020-36206	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201647	5.5	MEDIUM Local	xcb_project	xcb	An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.	CWE-415 CWE-416 Double Free Use After Free	CVE-2020-36205	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201648	4.7	MEDIUM Local	im_project	im	An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36204	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201649	4.7	MEDIUM Local	reffers_project	reffers	An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption.	CWE-362 CWE-787 Race Condition Out-of-bounds Write	CVE-2020-36203	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

201650	6.1	MEDIUM Network	rust-lang	async-h1	An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.	CWE-79 Cross-site Scripting	CVE-2020-36202	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed