Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228451 5 警告 sflog - sflog! におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0703 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228452 9.3 危険 south river technologies - Titan FTP Server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0702 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228453 7.8 危険 print manager plus - Print Manager Plus 2008 Client Billing and Authentication におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0693 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228454 4.3 警告 simon elvery
WordPress.org		 - WordPress 用の Simon Elvery WP-Footnotes プラグイにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0691 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228455 4.3 警告 smartscript - Smartscript Domain Trader の catalog.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0688 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228456 7.5 危険 youtube - Youtube Clone Script の siteadmin/editor_files/includes/load_message.php におけるクロスサイトスクリプティングの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0687 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228457 7.5 危険 WordPress.org - WordPress 用の st_newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0683 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228458 7.5 危険 WordPress.org - WordPress 用の Wordspew プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0682 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228459 6.8 警告 phpshop - PHPShop の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0681 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228460 7.5 危険 the everything development company - The Everything Development System の The Everything Development Engine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0675 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209361 9.8 CRITICAL
Network 		irfanview b3d IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+1cbf heap-based out-of-bounds write. CWE-787
 Out-of-bounds Write 		CVE-2020-13880 2024-11-21 14:02 2024-01-5 Show GitHub Exploit DB Packet Storm
209362 9.8 CRITICAL
Network 		irfanview b3d IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+214f heap-based out-of-bounds write. CWE-787
 Out-of-bounds Write 		CVE-2020-13879 2024-11-21 14:02 2024-01-5 Show GitHub Exploit DB Packet Storm
209363 9.8 CRITICAL
Network 		irfanview b3d IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27ef heap-based out-of-bounds write. CWE-787
 Out-of-bounds Write 		CVE-2020-13878 2024-11-21 14:02 2024-01-5 Show GitHub Exploit DB Packet Storm
209364 7.5 HIGH
Network 		mi xiaomi_router_firmware When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability. This vulnerability is caused by the lack of access control policies on som… CWE-306
Missing Authentication for Critical Function 		CVE-2020-14140 2024-11-21 14:02 2023-03-30 Show GitHub Exploit DB Packet Storm
209365 9.8 CRITICAL
Network 		mi xiaomi The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Se… NVD-CWE-noinfo
CVE-2020-14131 2024-11-21 14:02 2022-10-12 Show GitHub Exploit DB Packet Storm
209366 9.8 CRITICAL
Network 		mi xiaomi A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity verification failure, which can be exploited by an attacker who can obtain a brief elevation of privilege. NVD-CWE-noinfo
CVE-2020-14129 2024-11-21 14:02 2022-10-12 Show GitHub Exploit DB Packet Storm
209367 7.5 HIGH
Network 		mi sound Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive info… NVD-CWE-noinfo
CVE-2020-14126 2024-11-21 14:02 2022-07-23 Show GitHub Exploit DB Packet Storm
209368 7.5 HIGH
Network 		mi smarthome information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensit… NVD-CWE-noinfo
CVE-2020-14114 2024-11-21 14:02 2022-07-23 Show GitHub Exploit DB Packet Storm
209369 7.5 HIGH
Network 		mi miui A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by heap overflow and can be exploited by attackers to make remote denial of service. CWE-787
 Out-of-bounds Write 		CVE-2020-14127 2024-11-21 14:02 2022-07-15 Show GitHub Exploit DB Packet Storm
209370 7.5 HIGH
Network 		mi miui A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service. CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2020-14125 2024-11-21 14:02 2022-06-9 Show GitHub Exploit DB Packet Storm