Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229091 4.3 警告 ソフォス - Sophos ES1000 および ES4000 Email Security Appliance の Web の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0838 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
229092 7.5 危険 simple cms - Simple CMS の indexen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0835 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
229093 7.5 危険 PHPNUKE - PHP-Nuke の Books モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0827 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
229094 3.6 注意 scribe - Scribe の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0822 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
229095 3.6 注意 plutostatus - PlutoStatus Locator の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0819 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
229096 6.4 警告 truc - TRUC の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0814 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
229097 5 警告 xpweb - XPWeb の Download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0813 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
229098 9.3 危険 reality - PHPizabi の image.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0805 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
229099 6.8 警告 Thecus - Thecus N5200Pro NAS Server の usrgetform.html における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0804 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
229100 7.5 危険 VWar - VWar の calendar.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0753 2012-12-20 18:34 2008-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196051 6.1 MEDIUM
Network 		apple tvos
iphone_os
icloud
itunes
safari
watchos
ipados 		A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows … CWE-79
Cross-site Scripting 		CVE-2020-9925 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
196052 7.8 HIGH
Local 		apple iphone_os
watchos
ipados 		A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, watchOS 6.2.8. A malicious application may be able to execute arbitrary code wi… CWE-787
 Out-of-bounds Write 		CVE-2020-9923 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
196053 9.8 CRITICAL
Network 		apple mac_os_x
tvos
watchos 		An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A remote attacker may be able to cause unexpected system… CWE-125
Out-of-bounds Read 		CVE-2020-9918 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
196054 7.5 HIGH
Network 		apple iphone_os
ipados 		This issue was addressed with improved checks. This issue is fixed in iOS 13.6 and iPadOS 13.6. A remote attacker may be able to cause a denial of service. NVD-CWE-noinfo
CVE-2020-9917 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
196055 5.3 MEDIUM
Network 		apple tvos
iphone_os
icloud
itunes
safari
watchos
ipados 		A URL Unicode encoding issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iClo… NVD-CWE-noinfo
CVE-2020-9916 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
196056 6.5 MEDIUM
Network 		apple tvos
iphone_os
icloud
itunes
safari
watchos
ipados 		An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.… NVD-CWE-noinfo
CVE-2020-9915 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
196057 7.5 HIGH
Network 		apple tvos
iphone_os
ipados 		An input validation issue existed in Bluetooth. This issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An attacker in a privileged netw… CWE-20
 Improper Input Validation  		CVE-2020-9914 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
196058 5.5 MEDIUM
Local 		apple mac_os_x This issue was addressed with improved data protection. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to leak sensitive user information. NVD-CWE-noinfo
CVE-2020-9913 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
196059 3.3 LOW
Local 		apple safari A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.2. A malicious attacker may be able to change the origin of a frame for a download in Safari Reader mode. NVD-CWE-noinfo
CVE-2020-9912 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
196060 7.5 HIGH
Network 		apple iphone_os
safari
ipados 		A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. An issue in Safari Reader mode may allow a remote attacker to bypass the Same O… NVD-CWE-noinfo
CVE-2020-9911 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm