Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228711	6.8	警告	Pluck CMS	-	Pluck の data/inc/lib/pcltar.lib.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6253	2012-12-20 19:10	2009-02-24	Show	GitHub Exploit DB Packet Storm

228712	7.2	危険	smcfancontrol	-	smcFanControl の smc プログラムにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-6252	2012-12-20 19:10	2009-02-24	Show	GitHub Exploit DB Packet Storm

228713	6.8	警告	scripts	-	phpFan の includes/init.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6251	2012-12-20 19:10	2009-02-24	Show	GitHub Exploit DB Packet Storm

228714	7.5	危険	scripts-for-sites	-	SFS EZ Top Sites の topsite.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6247	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

228715	7.5	危険	scripts-for-sites	-	SFS EZ Webring の category.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6246	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

228716	7.5	危険	scripts-for-sites	-	SFS EZ BIZ PRO の track.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6245	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

228717	7.5	危険	scripts-for-sites	-	SFS EZ Gaming Cheats の view_reviews.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6244	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

228718	7.5	危険	scripts-for-sites	-	SFS Hotscripts-like Site の showcategory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6243	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

228719	7.5	危険	scripts-for-sites	-	SFS EZ e-store の SearchResults.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6242	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

228720	7.5	危険	scripts-for-sites	-	SFS Hotscripts-like Site の software-description.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6237	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208581	6.1	MEDIUM Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory. An attacker who successfully exploited this vulnerabili…	NVD-CWE-noinfo	CVE-2020-1598	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

208582	7.8	HIGH Local	microsoft	windows_server_2016 windows_10	<p>An elevation of privilege vulnerability exists when the Windows InstallService improperly handles memory.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on th…	NVD-CWE-noinfo	CVE-2020-1532	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

208583	5.4	MEDIUM Adjacent	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-1596	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

208584	9.9	CRITICAL Network	microsoft	sharepoint_foundation sharepoint_enterprise_server sharepoint_server	<p>A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input. An attacker who successfully exploited the vulnerability could run…	CWE-494 Download of Code Without Integrity Check	CVE-2020-1595	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

208585	7.8	HIGH Local	microsoft	excel office 365_apps	<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability coul…	NVD-CWE-noinfo	CVE-2020-1594	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

208586	7.6	HIGH Network	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected…	NVD-CWE-noinfo	CVE-2020-1593	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

208587	4.4	MEDIUM Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p> <p>To exploit this vulnerability, an authenticated attacker could run a special…	CWE-665 Improper Initialization	CVE-2020-1592	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

208588	6.6	MEDIUM Local	microsoft	windows_server_2019 windows_10 windows_server_2016	<p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerabili…	NVD-CWE-noinfo	CVE-2020-1590	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

208589	4.4	MEDIUM Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to f…	NVD-CWE-noinfo	CVE-2020-1589	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

208590	8.5	HIGH Network	microsoft	sharepoint_foundation sharepoint_server sharepoint_enterprise_server	<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulner…	CWE-494 Download of Code Without Integrity Check	CVE-2020-1576	2024-11-21 14:10	2020-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed