Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228731 4.3 警告 Simple Machines - SMF におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0284 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
228732 7.5 危険 xforum - Xforum の liretopic.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0279 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
228733 6 警告 X7 Group - X7 Chat の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0278 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
228734 6 警告 taskfreak - TaskFreak! の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0270 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
228735 6.8 警告 wavelink media - TutorialCMS の activate.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0254 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
228736 5 警告 php webquest - PHP Webquest におけるデータベースの資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0249 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
228737 9.3 危険 streamaudio - StreamAudio ChainCast ProxyManager の ccpm_0237.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0248 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
228738 10 危険 uploadscript - UploadScript の admin.php における管理者の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0246 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
228739 7.5 危険 uploadscript - UploadImage の admin.php における管理者の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0245 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
228740 10 危険 SAP - SAP MaxDB における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0244 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201301 6.1 MEDIUM
Network 		thinkific thinkific Thinkific Thinkific Online Course Creation Platform 1.0 is affected by: Cross Site Scripting (XSS). The impact is: execute arbitrary code (remote). The component is: Affected Source code of the websi… CWE-79
Cross-site Scripting 		CVE-2020-35698 2024-11-21 14:27 2023-07-26 Show GitHub Exploit DB Packet Storm
201302 9.8 CRITICAL
Network 		inxedu inxedu SQL Injection vulnerability in file /inxedu/demo_inxedu_open/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu 2.0.6 via the id value. CWE-89
SQL Injection 		CVE-2020-35326 2024-11-21 14:27 2023-01-19 Show GitHub Exploit DB Packet Storm
201303 4.3 MEDIUM
Adjacent 		bluetooth bluetooth_core_specification An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in Bluetooth Core Specificati… CWE-203
CWE-294
 Information Exposure Through Discrepancy
Authentication Bypass by Capture-replay  		CVE-2020-35473 2024-11-21 14:27 2022-11-8 Show GitHub Exploit DB Packet Storm
201304 8.8 HIGH
Network 		bigprof online_invoicing_system BigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to move the records of members across groups. The applicable endpoint (admin/pageTransferOwnership.php) … CWE-352
 Origin Validation Error 		CVE-2020-35675 2024-11-21 14:27 2022-09-29 Show GitHub Exploit DB Packet Storm
201305 9.8 CRITICAL
Network 		bigprof online_invoicing_system BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordReset.php (the endpoint that is responsible for issuing self-service password res… CWE-89
SQL Injection 		CVE-2020-35674 2024-11-21 14:27 2022-09-29 Show GitHub Exploit DB Packet Storm
201306 5.5 MEDIUM
Local 		libraw libraw In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files. CWE-125
Out-of-bounds Read 		CVE-2020-35535 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
201307 5.5 MEDIUM
Local 		libraw libraw In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-35534 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
201308 5.5 MEDIUM
Local 		libraw
debian 		libraw
debian_linux 		In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file. CWE-125
Out-of-bounds Read 		CVE-2020-35533 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
201309 5.5 MEDIUM
Local 		libraw
debian 		libraw
debian_linux 		In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride fiel… CWE-125
Out-of-bounds Read 		CVE-2020-35532 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
201310 5.5 MEDIUM
Local 		libraw
debian 		libraw
debian_linux 		In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file. CWE-125
Out-of-bounds Read 		CVE-2020-35531 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm