Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228781 6.8 警告 sitexs cms - SiteXS CMS の adm/visual/upload.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6617 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228782 4.3 警告 Zen Cart - Zen Software Zen Cart の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6616 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228783 7.5 危険 Zen Cart - Zen Software Zen Cart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6615 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228784 10 危険 picoflat - PicoFlat CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6604 2012-12-20 19:10 2009-04-4 Show GitHub Exploit DB Packet Storm
228785 10 危険 stadtaus - Download Center Lite における脆弱性 CWE-noinfo
情報不足
CVE-2008-6602 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
228786 4.3 警告 xmlportal - XMLPortal の検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6600 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
228787 10 危険 Sangoma - WANPIPE における脆弱性 CWE-362
競合状態
CVE-2008-6598 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
228788 4.3 警告 phpcredo - PHCDownload の upload/install/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6597 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
228789 5.5 警告 Simple Machines - SMF の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6659 2012-12-20 19:10 2008-11-7 Show GitHub Exploit DB Packet Storm
228790 4 警告 Simple Machines - SMF の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6658 2012-12-20 19:10 2008-11-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208421 8.1 HIGH
Network
facebook hermes An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835377369c8fd5917d9b87acffa721ad2a168 allows attackers to pote… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2020-1912 2024-11-21 14:11 2020-09-10 Show GitHub Exploit DB Packet Storm
208422 7.5 HIGH
Network
linux
redhat
linux_kernel
enterprise_linux
enterprise_mrg
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the ker… - CVE-2020-1749 2024-11-21 14:11 2020-09-10 Show GitHub Exploit DB Packet Storm
208423 3.7 LOW
Network
openssl
canonical
debian
oracle
fujitsu
openssl
ubuntu_linux
debian_linux
peoplesoft_enterprise_peopletools
jd_edwards_world_security
ethernet_switch_es2-64_firmware
ethernet_switch_es2-72_firmware
m10-1_firmware
m1…
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based cipher… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-1968 2024-11-21 14:11 2020-09-9 Show GitHub Exploit DB Packet Storm
208424 9.8 CRITICAL
Network
facebook hermes A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit fe52854cdf6725c2eaa9e125995da76e6ceb27da allo… CWE-843
Type Confusion
CVE-2020-1911 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208425 8.8 HIGH
Network
whatsapp whatsapp
whatsapp_business
A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.… CWE-787
 Out-of-bounds Write
CVE-2020-1894 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208426 9.8 CRITICAL
Network
whatsapp whatsapp
whatsapp_business
A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business … CWE-787
 Out-of-bounds Write
CVE-2020-1891 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208427 7.5 HIGH
Network
whatsapp whatsapp
whatsapp_business
A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malfor… CWE-20
 Improper Input Validation 
CVE-2020-1890 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208428 10.0 CRITICAL
Network
whatsapp whatsapp_desktop A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution … NVD-CWE-noinfo
CVE-2020-1889 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208429 8.8 HIGH
Network
whatsapp whatsapp
whatsapp_business
A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after rec… CWE-787
CWE-120
 Out-of-bounds Write
Classic Buffer Overflow
CVE-2020-1886 2024-11-21 14:11 2020-09-4 Show GitHub Exploit DB Packet Storm
208430 4.3 MEDIUM
Network
otrs otrs When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affec… CWE-613
 Insufficient Session Expiration
CVE-2020-1776 2024-11-21 14:11 2020-07-21 Show GitHub Exploit DB Packet Storm