Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228771 7.5 危険 wh-com - Joomla! および Mambo 用の webhosting.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6653 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
228772 8.8 危険 versalsoft - Versalsoft HTTP Image Uploader ActiveX コントロールにおける任意のファイルを削除される脆弱性 CWE-16
環境設定 		CVE-2008-6638 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
228773 7.8 危険 TYPO3 Association - TYPO3 用の wt_gallery エクステンションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6630 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
228774 4.3 警告 webbdomain - WEBBDOMAIN Multi Languages WebShop Online の detail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6629 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228775 7.5 危険 webbdomain - WEBBDOMAIN WebShop の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6627 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228776 7.5 危険 webbdomain - WEBBDOMAIN Quiz の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6626 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228777 7.5 危険 webbdomain - WEBBDOMAIN Polls の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6625 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228778 7.5 危険 webbdomain - WEBBDOMAIN Petition の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6624 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228779 7.5 危険 webbdomain - WEBBDOMAIN Post Card の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6623 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228780 7.5 危険 webbdomian - WEBBDOMAIN Post Card の choosecard.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6622 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208621 7.8 HIGH
Local 		microsoft word
office_web_apps
sharepoint_server
office
sharepoint_enterprise_server
office_online_server
365_apps 		<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a spe… NVD-CWE-noinfo
CVE-2020-1218 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
208622 5.5 MEDIUM
Local 		microsoft windows_10 A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitra… NVD-CWE-noinfo
CVE-2020-1574 2024-11-21 14:10 2020-08-18 Show GitHub Exploit DB Packet Storm
208623 7.5 HIGH
Network 		microsoft
fedoraproject 		asp.net_core
visual_studio_2019
visual_studio_2017
fedora 		A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NE… NVD-CWE-noinfo
CVE-2020-1597 2024-11-21 14:10 2020-08-18 Show GitHub Exploit DB Packet Storm
208624 5.4 MEDIUM
Network 		microsoft dynamics_365 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attac… CWE-79
Cross-site Scripting 		CVE-2020-1591 2024-11-21 14:10 2020-08-18 Show GitHub Exploit DB Packet Storm
208625 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vulnerability, an attacker would first have to gain ex… NVD-CWE-noinfo
CVE-2020-1587 2024-11-21 14:10 2020-08-18 Show GitHub Exploit DB Packet Storm
208626 8.8 HIGH
Network 		microsoft windows_10 A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control o… NVD-CWE-noinfo
CVE-2020-1585 2024-11-21 14:10 2020-08-18 Show GitHub Exploit DB Packet Storm
208627 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_server_2008
windows_7
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated pe… NVD-CWE-noinfo
CVE-2020-1584 2024-11-21 14:10 2020-08-18 Show GitHub Exploit DB Packet Storm
208628 7.3 HIGH
Local 		microsoft windows_10 An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After suc… CWE-276
Incorrect Default Permissions  		CVE-2020-1571 2024-11-21 14:10 2020-08-18 Show GitHub Exploit DB Packet Storm
208629 7.8 HIGH
Local 		microsoft windows_10
windows_8.1
windows_7
windows_rt_8.1 		An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim sy… NVD-CWE-noinfo
CVE-2020-1551 2024-11-21 14:10 2020-08-18 Show GitHub Exploit DB Packet Storm
208630 7.8 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the vict… NVD-CWE-noinfo
CVE-2020-1550 2024-11-21 14:10 2020-08-18 Show GitHub Exploit DB Packet Storm