Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228681 7.5 危険 xigla - Xigla Software Absolute Newsletter における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6861 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228682 7.5 危険 xigla - Xigla Software Absolute Poll Manager XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6860 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228683 7.5 危険 xigla - Xigla Software Absolute Control Panel XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6859 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228684 7.5 危険 xigla - Absolute Banner Manager .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6858 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228685 7.5 危険 xigla - Absolute Podcast .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6857 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228686 7.5 危険 xigla - Xigla Software Absolute News Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6856 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228687 7.5 危険 xigla - Xigla Software Absolute News Feed における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6855 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228688 7.5 危険 xigla - Xigla Software Absolute FAQ Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6854 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228689 4.3 警告 PHP-Fusion - PHP-Fusion の messages.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6850 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228690 6.8 警告 w2b - phpGreetCards の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6849 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208501 7.0 HIGH
Local 		gnu
redhat
canonical 		glibc
enterprise_linux
ubuntu_linux 		An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when stor… CWE-787
 Out-of-bounds Write 		CVE-2020-1751 2024-11-21 14:11 2020-04-18 Show GitHub Exploit DB Packet Storm
208502 9.8 CRITICAL
Network 		apache heron It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not configure its YAML parser to prevent the instantiation of arbitrary types, resu… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-1964 2024-11-21 14:11 2020-04-17 Show GitHub Exploit DB Packet Storm
208503 8.6 HIGH
Network 		juniper junos
junos_os_evolved 		In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-1632 2024-11-21 14:11 2020-04-16 Show GitHub Exploit DB Packet Storm
208504 5.3 MEDIUM
Network 		libssh
canonical
netapp
redhat
fedoraproject
oracle 		libssh
ubuntu_linux
cloud_backup
enterprise_linux
fedora
mysql_workbench 		A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been f… CWE-476
 NULL Pointer Dereference 		CVE-2020-1730 2024-11-21 14:11 2020-04-14 Show GitHub Exploit DB Packet Storm
208505 5.5 MEDIUM
Local 		huawei mate_30_pro_firmware
mate_30_firmware 		There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, succ… CWE-287
Improper Authentication 		CVE-2020-1801 2024-11-21 14:11 2020-04-11 Show GitHub Exploit DB Packet Storm
208506 7.8 HIGH
Local 		facebook instagram A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128. CWE-190
 Integer Overflow or Wraparound 		CVE-2020-1895 2024-11-21 14:11 2020-04-10 Show GitHub Exploit DB Packet Storm
208507 7.8 HIGH
Local 		oculus desktop Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges… CWE-59
Link Following 		CVE-2020-1885 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm
208508 5.5 MEDIUM
Local 		juniper junos_os_evolved A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-1624 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm
208509 5.5 MEDIUM
Local 		juniper junos_os_evolved A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-1623 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm
208510 5.5 MEDIUM
Local 		juniper junos_os_evolved A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-1622 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm