Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228641	7.5	危険	softcomplex	-	SoftComplex PHP Image Gallery の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6485	2012-12-20 19:10	2009-03-18	Show	GitHub Exploit DB Packet Storm

228642	7.5	危険	virtuemart-solutions	-	Joomla! 用の Ecom Solutions VirtueMart Google Base コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6483	2012-12-20 19:10	2009-03-18	Show	GitHub Exploit DB Packet Storm

228643	7.2	危険	SCO	-	SCO UnixWare の ReliantHA におけるルート権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6559	2012-12-20 19:10	2008-05-5	Show	GitHub Exploit DB Packet Storm

228644	7.2	危険	unixware SCO	-	SCO UnixWare の ReliantHA におけるルート権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6558	2012-12-20 19:10	2008-05-5	Show	GitHub Exploit DB Packet Storm

228645	6.8	警告	softnews media group	-	Datalife Engine の engine/modules/imagepreview.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-6480	2012-12-20 19:10	2009-03-16	Show	GitHub Exploit DB Packet Storm

228646	7.5	危険	plaincart	-	PlainCart の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6469	2012-12-20 19:10	2009-03-13	Show	GitHub Exploit DB Packet Storm

228647	7.5	危険	TYPO3 Association	-	TYPO3 用の autobeuser エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6459	2012-12-20 19:10	2009-03-13	Show	GitHub Exploit DB Packet Storm

228648	7.5	危険	walnutstreet	-	TYPO3 用の cgswigmore エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6457	2012-12-20 19:10	2009-03-13	Show	GitHub Exploit DB Packet Storm

228649	9.3	危険	quiksoft	-	QuikSoft EasyMail MailStore ActiveX コントロールの emmailstore.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-6447	2012-12-20 19:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

228650	7.5	危険	yourplace	-	YourPlace における脆弱性	CWE-287 不適切な認証	CVE-2008-6445	2012-12-20 19:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201871	4.9	MEDIUM Network	cisco	vision_dynamic_signage_director	A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection a…	CWE-89 SQL Injection	CVE-2020-3450	2024-11-21 14:31	2020-07-17	Show	GitHub Exploit DB Packet Storm

201872	6.5	MEDIUM Network	cisco	sd-wan_firmware	A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device…	-	CVE-2020-3437	2024-11-21 14:31	2020-07-17	Show	GitHub Exploit DB Packet Storm

201873	9.8	CRITICAL Network	geovision	gv-as210_firmware gv-as410_firmware gv-as810_firmware gv-gf1921_firmware gv-as1010_firmware gv-gf1922_firmware	Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.	CWE-120 Classic Buffer Overflow	CVE-2020-3931	2024-11-21 14:31	2020-07-8	Show	GitHub Exploit DB Packet Storm

201874	5.5	MEDIUM Local	adobe	after_effects	Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .	CWE-125 Out-of-bounds Read	CVE-2020-3809	2024-11-21 14:31	2020-06-27	Show	GitHub Exploit DB Packet Storm

201875	6.5	MEDIUM Network	adobe	digital_editions	Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration (host or local network) vulnerability. Successful exploitation could lead to information disclosure.	NVD-CWE-noinfo	CVE-2020-3798	2024-11-21 14:31	2020-06-27	Show	GitHub Exploit DB Packet Storm

201876	6.5	MEDIUM Network	adobe	coldfusion	ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.	NVD-CWE-noinfo	CVE-2020-3796	2024-11-21 14:31	2020-06-27	Show	GitHub Exploit DB Packet Storm

201877	7.8	HIGH Local	adobe	coldfusion	ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.	CWE-426 Untrusted Search Path	CVE-2020-3768	2024-11-21 14:31	2020-06-27	Show	GitHub Exploit DB Packet Storm

201878	6.5	MEDIUM Network	adobe	coldfusion	ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. Successful exploitation could lead to application-level denial-of-service (dos).	CWE-20 Improper Input Validation	CVE-2020-3767	2024-11-21 14:31	2020-06-27	Show	GitHub Exploit DB Packet Storm

201879	7.8	HIGH Local	qualcomm	apq8096au_firmware apq8098_firmware kamorta_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware msm8998_firmware nicobar_firmware<…	Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil…	CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write	CVE-2020-3676	2024-11-21 14:31	2020-06-22	Show	GitHub Exploit DB Packet Storm

201880	7.8	HIGH Local	qualcomm	apq8009_firmware apq8053_firmware apq8096au_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9615_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmwar…	A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn…	CWE-129 Improper Validation of Array Index	CVE-2020-3665	2024-11-21 14:31	2020-06-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed