Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228581 2.6 注意 Ando Saabas - Sphider の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5211 2012-12-20 18:52 2008-11-24 Show GitHub Exploit DB Packet Storm
228582 9.3 危険 phpblock - PhpBlock における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5210 2012-12-20 18:52 2008-11-24 Show GitHub Exploit DB Packet Storm
228583 4.3 警告 wellyblog - wellyblog の edit.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5205 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
228584 6.8 警告 poweraward - PowerAward におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5204 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
228585 4.3 警告 poweraward - PowerAward の external_vote.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5203 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
228586 7.5 危険 phpoutsourcing - PHPOutsourcing IdeaBox の include.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5199 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
228587 7.5 危険 vizzed - Acmlmboard の memberlist.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5198 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
228588 7.5 危険 PHP-Fusion - PHP-Fusion の classifieds.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5197 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
228589 7.5 危険 PHP-Fusion - PHP-Fusion 用の Kroax モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5196 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
228590 7.5 危険 sebrac - SebracCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5195 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208801 6.5 MEDIUM
Network 		freedesktop poppler Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. CWE-787
 Out-of-bounds Write 		CVE-2020-18839 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm
208802 7.8 HIGH
Local 		exiv2 exiv2 Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file. CWE-787
 Out-of-bounds Write 		CVE-2020-18831 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm
208803 5.5 MEDIUM
Local 		audiofile audiofile Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert. CWE-787
 Out-of-bounds Write 		CVE-2020-18781 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm
208804 5.5 MEDIUM
Local 		nasm netwide_assembler A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command. CWE-416
 Use After Free 		CVE-2020-18780 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm
208805 5.5 MEDIUM
Local 		zziplib_project zziplib An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service. NVD-CWE-noinfo
CVE-2020-18770 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm
208806 5.5 MEDIUM
Local 		libtiff libtiff There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file. CWE-787
 Out-of-bounds Write 		CVE-2020-18768 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm
208807 6.5 MEDIUM
Network 		exempi_project exempi Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file. CWE-787
 Out-of-bounds Write 		CVE-2020-18652 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm
208808 8.8 HIGH
Network 		hdfgroup hdf5 Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. CWE-787
 Out-of-bounds Write 		CVE-2020-18494 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm
208809 6.5 MEDIUM
Network 		webassembly binaryen Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-s… CWE-787
 Out-of-bounds Write 		CVE-2020-18382 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm
208810 6.5 MEDIUM
Network 		webassembly binaryen A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-s… CWE-476
 NULL Pointer Dereference 		CVE-2020-18378 2024-11-21 14:08 2023-08-23 Show GitHub Exploit DB Packet Storm