Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228631 7.5 危険 X7 Group - X7 Chat のログインページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6964 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
228632 7.5 危険 turnkeyforms - TurnkeyForms Text Link Sales の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6963 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
228633 5 警告 x10media - X10media x10 Automatic Mp3 Search Engine Script の download.php における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6960 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
228634 7.5 危険 wowraidmanager - WoW Raid Manager の auth/auth_phpbb3.php における認証を回避される脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-7050 2012-12-20 19:10 2008-10-13 Show GitHub Exploit DB Packet Storm
228635 7.5 危険 Simple Machines - SMF のパスワードリセット機能における他のユーザのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-6971 2012-12-20 19:10 2008-09-7 Show GitHub Exploit DB Packet Storm
228636 7.5 危険 UBB Systems - UBB.threads の dosearch.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6970 2012-12-20 19:10 2008-09-2 Show GitHub Exploit DB Packet Storm
228637 10 危険 raidsonic - RaidSonic ICY BOX NAS の userHandler.cgi における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-7081 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
228638 5 警告 phpclassifiedsscript - Team PHP PHP Classifieds Script におけるデータベース資格情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7080 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
228639 7.5 危険 relative - SailPlanner における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7077 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
228640 7.8 危険 シーメンス - Siemens C450 IP など VoIP デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2008-7065 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208421 8.1 HIGH
Network
facebook hermes An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835377369c8fd5917d9b87acffa721ad2a168 allows attackers to pote… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2020-1912 2024-11-21 14:11 2020-09-10 Show GitHub Exploit DB Packet Storm
208422 7.5 HIGH
Network
linux
redhat
linux_kernel
enterprise_linux
enterprise_mrg
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the ker… - CVE-2020-1749 2024-11-21 14:11 2020-09-10 Show GitHub Exploit DB Packet Storm
208423 3.7 LOW
Network
openssl
canonical
debian
oracle
fujitsu
openssl
ubuntu_linux
debian_linux
peoplesoft_enterprise_peopletools
jd_edwards_world_security
ethernet_switch_es2-64_firmware
ethernet_switch_es2-72_firmware
m10-1_firmware
m1…
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based cipher… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-1968 2024-11-21 14:11 2020-09-9 Show GitHub Exploit DB Packet Storm
208424 9.8 CRITICAL
Network
facebook hermes A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit fe52854cdf6725c2eaa9e125995da76e6ceb27da allo… CWE-843
Type Confusion
CVE-2020-1911 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208425 8.8 HIGH
Network
whatsapp whatsapp
whatsapp_business
A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.… CWE-787
 Out-of-bounds Write
CVE-2020-1894 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208426 9.8 CRITICAL
Network
whatsapp whatsapp
whatsapp_business
A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business … CWE-787
 Out-of-bounds Write
CVE-2020-1891 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208427 7.5 HIGH
Network
whatsapp whatsapp
whatsapp_business
A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malfor… CWE-20
 Improper Input Validation 
CVE-2020-1890 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208428 10.0 CRITICAL
Network
whatsapp whatsapp_desktop A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution … NVD-CWE-noinfo
CVE-2020-1889 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208429 8.8 HIGH
Network
whatsapp whatsapp
whatsapp_business
A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after rec… CWE-787
CWE-120
 Out-of-bounds Write
Classic Buffer Overflow
CVE-2020-1886 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208430 4.3 MEDIUM
Network
otrs otrs When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affec… CWE-613
 Insufficient Session Expiration
CVE-2020-1776 2024-11-21 14:11 2020-07-21 Show GitHub Exploit DB Packet Storm