Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229021	7.5	危険	PHPNUKE	-	PHP-Nuke 用の 4nChat における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1220	2012-12-20 18:34	2008-03-10	Show	GitHub Exploit DB Packet Storm

229022	7.5	危険	PHPNUKE	-	PHP-Nuke 用の KutubiSitte モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1219	2012-12-20 18:34	2008-03-10	Show	GitHub Exploit DB Packet Storm

229023	4.3	警告	podcast generator	-	Podcast Generator の set_permissions.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1212	2012-12-20 18:34	2008-03-7	Show	GitHub Exploit DB Packet Storm

229024	9.3	危険	pnotepad	-	Programmer's Notepad の ctags parsing コードにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1210	2012-12-20 18:34	2008-03-7	Show	GitHub Exploit DB Packet Storm

229025	4.3	警告	xitex	-	Xitex WebContent M1 の redirect.do におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1209	2012-12-20 18:34	2008-03-7	Show	GitHub Exploit DB Packet Storm

229026	4.3	警告	サン・マイクロシステムズ	-	Sun Java System Access Manager の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1204	2012-12-20 18:34	2008-02-27	Show	GitHub Exploit DB Packet Storm

229027	7.1	危険	レッドハット	-	Red Hat Enterprise Linux のデフォルト IPSec ifup スクリプトにおける総当り攻撃を実行される脆弱性	CWE-16 環境設定	CVE-2008-1198	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

229028	4.3	警告	torrenttrader	-	TorrentTrader Classic の TorrentTrader Classic におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1173	2012-12-20 18:34	2008-03-5	Show	GitHub Exploit DB Packet Storm

229029	4.3	警告	torrenttrader	-	TorrentTrader Classic の account-inbox.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-1172	2012-12-20 18:34	2008-03-5	Show	GitHub Exploit DB Packet Storm

229030	7.8	危険	simm-comm	-	SCI Photo Chat Server の組み込まれた HTTP サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1169	2012-12-20 18:34	2008-03-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209291	7.5	HIGH Network	cisco	unified_ip_conference_station_7937g_firmware	A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove …	NVD-CWE-noinfo	CVE-2020-16139	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209292	7.5	HIGH Network	cisco	unified_ip_conference_station_7937g_firmware	A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vul…	NVD-CWE-noinfo	CVE-2020-16138	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209293	9.8	CRITICAL Network	cisco	unified_ip_conference_station_7937g_firmware	A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials for the SSH administrative console to arbitrary values. Not…	NVD-CWE-noinfo	CVE-2020-16137	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209294	6.1	MEDIUM Network	roundcube fedoraproject	webmail fedora	Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15.	CWE-79 Cross-site Scripting	CVE-2020-16145	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm

209295	7.5	HIGH Network	robotemi	temi	Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can …	CWE-798 Use of Hard-coded Credentials	CVE-2020-16170	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm

209296	3.8	LOW Local	qemu debian canonical opensuse	qemu debian_linux ubuntu_linux leap	In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw t…	CWE-617 Reachable Assertion	CVE-2020-16092	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm

209297	6.1	MEDIUM Network	jetbrains	teamcity	JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI.	CWE-79 Cross-site Scripting	CVE-2020-15831	2024-11-21 14:06	2020-08-9	Show	GitHub Exploit DB Packet Storm

209298	6.1	MEDIUM Network	jetbrains	teamcity	JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI.	CWE-79 Cross-site Scripting	CVE-2020-15830	2024-11-21 14:06	2020-08-9	Show	GitHub Exploit DB Packet Storm

209299	5.3	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-15829	2024-11-21 14:06	2020-08-9	Show	GitHub Exploit DB Packet Storm

209300	6.5	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions.	NVD-CWE-noinfo	CVE-2020-15828	2024-11-21 14:06	2020-08-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed