Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 11, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228471 | 9.3 | 危険 | シマンテック | - | Symantec Veritas Storage Foundation の VEA サービスにおけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-0638 | 2012-12-20 18:34 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 228472 | 7.5 | 危険 | sejoong namo | - | Sejoong Namo ActiveSquare で使用される NamoInstaller.dll におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-0634 | 2012-12-20 18:34 | 2008-02-6 | Show | GitHub Exploit DB Packet Storm |
| 228473 | 7.5 | 危険 | SAP | - | SAP GUI および SAPSprint に含まれる SAPLPD におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-0621 | 2012-12-20 18:34 | 2008-02-6 | Show | GitHub Exploit DB Packet Storm |
| 228474 | 10 | 危険 | SAP | - | SAP GUI および SAPSprint に含まれる SAPLPD におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2008-0620 | 2012-12-20 18:34 | 2008-02-6 | Show | GitHub Exploit DB Packet Storm |
| 228475 | 7.5 | 危険 | rmsoft XOOPS |
- | XOOPS 用の RMSOFT Gallery System モジュールにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-0611 | 2012-12-20 18:34 | 2008-02-6 | Show | GitHub Exploit DB Packet Storm |
| 228476 | 9.3 | 危険 | UltraVNC | - | UltraVNC 用の vncviewer におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-0610 | 2012-12-20 18:34 | 2008-02-6 | Show | GitHub Exploit DB Packet Storm |
| 228477 | 6.8 | 警告 | xlight ftp server | - | XLight FTP Server の LDAP 認証機能におけるアクセス制限を回避される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2008-0604 | 2012-12-20 18:34 | 2008-02-6 | Show | GitHub Exploit DB Packet Storm |
| 228478 | 4.3 | 警告 | Skype Technologies S.A. | - | Windows 上で稼動する Skype の Internet Explorer Web コントロールにおけるクロスゾーンスクリプティングの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-0583 | 2012-12-20 18:34 | 2008-02-4 | Show | GitHub Exploit DB Packet Storm |
| 228479 | 4.3 | 警告 | Skype Technologies S.A. | - | Windows 上で稼動する Skype の Internet Explorer Web コントロールにおけるクロスゾーンスクリプティングの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-0582 | 2012-12-20 18:34 | 2008-02-4 | Show | GitHub Exploit DB Packet Storm |
| 228480 | 4.3 | 警告 | トリップワイヤ | - | Tripwire Enterprise の Web 管理ログインページにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0578 | 2012-12-20 18:34 | 2008-02-4 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 12, 2026, 5:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 195921 | 7.8 |
HIGH
Local |
backblaze | backblaze | Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to hardcoded whitelist of strings in URLs where … |
CWE-295
Improper Certificate Validation |
CVE-2020-8289 | 2024-11-21 14:38 | 2020-12-27 | Show | GitHub Exploit DB Packet Storm |
| 195922 | 9.8 |
CRITICAL
Network |
trendmicro | interscan_web_security_virtual_appliance | A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execut… |
CWE-78
OS Command |
CVE-2020-8466 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 195923 | 9.8 |
CRITICAL
Network |
trendmicro | interscan_web_security_virtual_appliance | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass (CVE-2020-8461) and authenticat… |
CWE-287 CWE-352 Improper Authentication Origin Validation Error |
CVE-2020-8465 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 195924 | 7.5 |
HIGH
Network |
trendmicro | interscan_web_security_virtual_appliance | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin … |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2020-8464 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 195925 | 7.5 |
HIGH
Network |
trendmicro | interscan_web_security_virtual_appliance | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths. |
CWE-22
Path Traversal |
CVE-2020-8463 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 195926 | 4.8 |
MEDIUM
Network |
trendmicro | interscan_web_security_virtual_appliance | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product. |
CWE-79
Cross-site Scripting |
CVE-2020-8462 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 195927 | 8.8 |
HIGH
Network |
trendmicro | interscan_web_security_virtual_appliance | A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without… |
CWE-352
Origin Validation Error |
CVE-2020-8461 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 195928 | 7.5 |
HIGH
Network |
haxx fedoraproject debian netapp apple siemens oracle splunk |
libcurl fedora debian_linux clustered_data_ontap solidfire hci_management_node hci_bootstrap_os hci_storage_node_firmware mac_os_x macos simatic_tim_1531_irc_firmware
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
|
CWE-295
|
Improper Certificate Validation
CVE-2020-8286
|
2024-11-21 14:38 |
2020-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 195929 | 7.5 |
HIGH
Network |
haxx debian fedoraproject netapp apple oracle fujitsu siemens splunk |
libcurl debian_linux fedora clustered_data_ontap solidfire hci_management_node hci_bootstrap_os hci_storage_node_firmware mac_os_x macos peoplesoft_enterprise_peopletool… |
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. |
CWE-787 CWE-674 Out-of-bounds Write Uncontrolled Recursion |
CVE-2020-8285 | 2024-11-21 14:38 | 2020-12-15 | Show | GitHub Exploit DB Packet Storm |
| 195930 | 3.7 |
LOW
Network |
haxx fedoraproject debian netapp apple oracle fujitsu siemens splunk |
curl fedora debian_linux clustered_data_ontap solidfire hci_management_node hci_storage_node hci_bootstrap_os mac_os_x macos peoplesoft_enterprise_peopletools communi… |
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about ser… |
NVD-CWE-noinfo
|
CVE-2020-8284 | 2024-11-21 14:38 | 2020-12-15 | Show | GitHub Exploit DB Packet Storm |