Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228631 7.5 危険 X7 Group - X7 Chat のログインページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6964 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
228632 7.5 危険 turnkeyforms - TurnkeyForms Text Link Sales の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6963 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
228633 5 警告 x10media - X10media x10 Automatic Mp3 Search Engine Script の download.php における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6960 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
228634 7.5 危険 wowraidmanager - WoW Raid Manager の auth/auth_phpbb3.php における認証を回避される脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-7050 2012-12-20 19:10 2008-10-13 Show GitHub Exploit DB Packet Storm
228635 7.5 危険 Simple Machines - SMF のパスワードリセット機能における他のユーザのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-6971 2012-12-20 19:10 2008-09-7 Show GitHub Exploit DB Packet Storm
228636 7.5 危険 UBB Systems - UBB.threads の dosearch.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6970 2012-12-20 19:10 2008-09-2 Show GitHub Exploit DB Packet Storm
228637 10 危険 raidsonic - RaidSonic ICY BOX NAS の userHandler.cgi における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-7081 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
228638 5 警告 phpclassifiedsscript - Team PHP PHP Classifieds Script におけるデータベース資格情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7080 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
228639 7.5 危険 relative - SailPlanner における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7077 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
228640 7.8 危険 シーメンス - Siemens C450 IP など VoIP デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2008-7065 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208501 7.0 HIGH
Local
gnu
redhat
canonical
glibc
enterprise_linux
ubuntu_linux
An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when stor… CWE-787
 Out-of-bounds Write
CVE-2020-1751 2024-11-21 14:11 2020-04-18 Show GitHub Exploit DB Packet Storm
208502 9.8 CRITICAL
Network
apache heron It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not configure its YAML parser to prevent the instantiation of arbitrary types, resu… CWE-502
 Deserialization of Untrusted Data
CVE-2020-1964 2024-11-21 14:11 2020-04-17 Show GitHub Exploit DB Packet Storm
208503 8.6 HIGH
Network
juniper junos
junos_os_evolved
In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing … CWE-755
 Improper Handling of Exceptional Conditions
CVE-2020-1632 2024-11-21 14:11 2020-04-16 Show GitHub Exploit DB Packet Storm
208504 5.3 MEDIUM
Network
libssh
canonical
netapp
redhat
fedoraproject
oracle
libssh
ubuntu_linux
cloud_backup
enterprise_linux
fedora
mysql_workbench
A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been f… CWE-476
 NULL Pointer Dereference
CVE-2020-1730 2024-11-21 14:11 2020-04-14 Show GitHub Exploit DB Packet Storm
208505 5.5 MEDIUM
Local
huawei mate_30_pro_firmware
mate_30_firmware
There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, succ… CWE-287
Improper Authentication
CVE-2020-1801 2024-11-21 14:11 2020-04-11 Show GitHub Exploit DB Packet Storm
208506 7.8 HIGH
Local
facebook instagram A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128. CWE-190
 Integer Overflow or Wraparound
CVE-2020-1895 2024-11-21 14:11 2020-04-10 Show GitHub Exploit DB Packet Storm
208507 7.8 HIGH
Local
oculus desktop Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges… CWE-59
Link Following
CVE-2020-1885 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm
208508 5.5 MEDIUM
Local
juniper junos_os_evolved A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2020-1624 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm
208509 5.5 MEDIUM
Local
juniper junos_os_evolved A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2020-1623 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm
208510 5.5 MEDIUM
Local
juniper junos_os_evolved A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2020-1622 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm