Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228741 9.3 危険 トレンドマイクロ - Housecall_ActiveX.dll の Trend Micro HouseCall ActiveX コントロールにおけるクライアントシステム上へ任意のライブラリファイルをダウンロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2434 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
228742 7.5 危険 トレンドマイクロ - Trend Micro OfficeScan などの Web 管理コンソールにおけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-2433 2012-12-20 18:52 2008-08-20 Show GitHub Exploit DB Packet Storm
228743 9.3 危険 VideoLAN - Windows 上で稼動する VLC Media Player の modules/demux/wav.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-2430 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
228744 6.8 警告 torrenttrader - TorrentTrader Classic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2428 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
228745 7.5 危険 webslider - Web Slider の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2422 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
228746 4.3 警告 SAP - SAP WAS などの Web GUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2421 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
228747 6.8 警告 stunnel - stunnel の OCSP 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2420 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
228748 6.8 警告 sazcart - SazCart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2411 2012-12-20 18:52 2008-05-22 Show GitHub Exploit DB Packet Storm
228749 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server の管理アプリケーションサーバにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-2406 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
228750 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2405 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209121 5.5 MEDIUM
Local 		freedesktop accountsservice An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment f… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-16127 2024-11-21 14:06 2020-11-11 Show GitHub Exploit DB Packet Storm
209122 3.3 LOW
Local 		freedesktop accountsservice An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to Accoun… NVD-CWE-noinfo
CVE-2020-16126 2024-11-21 14:06 2020-11-11 Show GitHub Exploit DB Packet Storm
209123 6.8 MEDIUM
Physics 		gnome gnome_display_manager gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could … CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2020-16125 2024-11-21 14:06 2020-11-10 Show GitHub Exploit DB Packet Storm
209124 7.8 HIGH
Local 		packagekit_project
canonical 		packagekit
ubuntu_linux 		PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured Policy… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-16122 2024-11-21 14:06 2020-11-7 Show GitHub Exploit DB Packet Storm
209125 3.3 LOW
Local 		packagekit_project
canonical 		packagekit
ubuntu_linux 		PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own. CWE-209
Information Exposure Through an Error Message 		CVE-2020-16121 2024-11-21 14:06 2020-11-7 Show GitHub Exploit DB Packet Storm
209126 7.8 HIGH
Local 		canonical ubuntu_linux Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-15708 2024-11-21 14:06 2020-11-6 Show GitHub Exploit DB Packet Storm
209127 9.0 CRITICAL
Network 		immuta immuta Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally, unauthenticated attackers can phish unauthenticated Immut… CWE-79
Cross-site Scripting 		CVE-2020-15952 2024-11-21 14:06 2020-11-6 Show GitHub Exploit DB Packet Storm
209128 6.1 MEDIUM
Network 		immuta immuta Immuta v2.8.2 accepts user-supplied project names without properly sanitizing the input, allowing attackers to inject arbitrary HTML content that is rendered as part of the application. An attacker c… CWE-79
Cross-site Scripting 		CVE-2020-15951 2024-11-21 14:06 2020-11-6 Show GitHub Exploit DB Packet Storm
209129 8.8 HIGH
Network 		immuta immuta Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout. CWE-613
 Insufficient Session Expiration 		CVE-2020-15950 2024-11-21 14:06 2020-11-6 Show GitHub Exploit DB Packet Storm
209130 7.5 HIGH
Network 		immuta immuta Immuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover. CWE-287
Improper Authentication 		CVE-2020-15949 2024-11-21 14:06 2020-11-6 Show GitHub Exploit DB Packet Storm