Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228691 4.3 警告 w2b - phpGreetCards の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6848 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228692 4.3 警告 PreProject.com - Pre ASP Job Board の Employee/emp_login.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6847 2012-12-20 19:10 2009-07-2 Show GitHub Exploit DB Packet Storm
228693 6.8 警告 Pluck CMS - Pluck の data/modules/blog/module_pages_site.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6842 2012-12-20 19:10 2009-07-2 Show GitHub Exploit DB Packet Storm
228694 4.3 警告 tgs-cms - TGS Content Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6839 2012-12-20 19:10 2009-06-27 Show GitHub Exploit DB Packet Storm
228695 4.3 警告 Zoph - Zoph の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6838 2012-12-20 19:10 2009-06-27 Show GitHub Exploit DB Packet Storm
228696 7.5 危険 Zoph - Zoph における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6837 2012-12-20 19:10 2009-06-27 Show GitHub Exploit DB Packet Storm
228697 5 警告 vicftps - VicFTPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6829 2012-12-20 19:10 2009-06-8 Show GitHub Exploit DB Packet Storm
228698 6.8 警告 trixbox - Fonality trixbox CE の user/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6825 2012-12-20 19:10 2009-06-5 Show GitHub Exploit DB Packet Storm
228699 4.3 警告 XOOPS - XOOPS の pmlite.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6885 2012-12-20 19:10 2008-12-7 Show GitHub Exploit DB Packet Storm
228700 6.8 警告 XOOPS - XOOPS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6884 2012-12-20 19:10 2008-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215521 6.5 MEDIUM
Network 		google android In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server wit… CWE-125
Out-of-bounds Read 		CVE-2020-0205 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm
215522 7.0 HIGH
Local 		google android In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lead to local escalation of privilege by allowing a bypass o… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-0204 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm
215523 7.8 HIGH
Local 		google android In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional … CWE-404
 Improper Resource Shutdown or Release 		CVE-2020-0203 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm
215524 7.8 HIGH
Local 		google android In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to local escalatio… CWE-862
 Missing Authorization 		CVE-2020-0202 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm
215525 9.8 CRITICAL
Network 		google android In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This could lead to remote escalation of privilege with no additional execution privile… NVD-CWE-noinfo
CVE-2020-0201 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm
215526 6.5 MEDIUM
Network 		google android In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional… CWE-125
Out-of-bounds Read 		CVE-2020-0200 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm
215527 4.1 MEDIUM
Local 		google android In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information disclosure with System execution privilege… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2020-0199 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm
215528 7.5 HIGH
Network 		google
debian
canonical
fedoraproject
libexif_project 		android
debian_linux
ubuntu_linux
fedora
libexif 		In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. … CWE-190
 Integer Overflow or Wraparound 		CVE-2020-0198 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm
215529 5.5 MEDIUM
Local 		google android In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution … CWE-125
Out-of-bounds Read 		CVE-2020-0197 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm
215530 6.5 MEDIUM
Adjacent 		google android In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper input validation. This could lead to remote denial of service of the Bluetooth … CWE-20
 Improper Input Validation  		CVE-2020-0196 2024-11-21 13:53 2020-06-12 Show GitHub Exploit DB Packet Storm