Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229091 7.5 危険 xigla - Xigla Software Absolute Newsletter における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6861 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229092 7.5 危険 xigla - Xigla Software Absolute Poll Manager XE における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6860 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229093 7.5 危険 xigla - Xigla Software Absolute Control Panel XE における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6859 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229094 7.5 危険 xigla - Absolute Banner Manager .NET における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6858 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229095 7.5 危険 xigla - Absolute Podcast .NET における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6857 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229096 7.5 危険 xigla - Xigla Software Absolute News Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6856 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229097 7.5 危険 xigla - Xigla Software Absolute News Feed における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6855 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229098 7.5 危険 xigla - Xigla Software Absolute FAQ Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6854 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229099 4.3 警告 PHP-Fusion - PHP-Fusion の messages.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6850 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
229100 6.8 警告 w2b - phpGreetCards の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-6849 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201901 5.5 MEDIUM
Local
f5 big-ip_access_policy_manager
big-ip_access_policy_manager_client
In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoContr… NVD-CWE-Other
CVE-2020-5898 2024-11-21 14:34 2020-05-13 Show GitHub Exploit DB Packet Storm
201902 8.8 HIGH
Network
f5 big-ip_access_policy_manager
big-ip_access_policy_manager_client
In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component. CWE-416
 Use After Free
CVE-2020-5897 2024-11-21 14:34 2020-05-13 Show GitHub Exploit DB Packet Storm
201903 7.8 HIGH
Local
f5 big-ip_access_policy_manager
big-ip_access_policy_manager_client
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions. CWE-276
Incorrect Default Permissions 
CVE-2020-5896 2024-11-21 14:34 2020-05-13 Show GitHub Exploit DB Packet Storm
201904 7.8 HIGH
Local
symantec endpoint_protection Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege. CWE-59
Link Following
CVE-2020-5837 2024-11-21 14:34 2020-05-12 Show GitHub Exploit DB Packet Storm
201905 7.8 HIGH
Local
symantec endpoint_protection Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection feature is disabled. NVD-CWE-noinfo
CVE-2020-5836 2024-11-21 14:34 2020-05-12 Show GitHub Exploit DB Packet Storm
201906 7.0 HIGH
Local
symantec endpoint_protection_manager Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine. CWE-362
Race Condition
CVE-2020-5835 2024-11-21 14:34 2020-05-12 Show GitHub Exploit DB Packet Storm
201907 5.3 MEDIUM
Network
symantec endpoint_protection_manager Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory. CWE-22
Path Traversal
CVE-2020-5834 2024-11-21 14:34 2020-05-12 Show GitHub Exploit DB Packet Storm
201908 3.3 LOW
Local
symantec endpoint_protection_manager Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of t… CWE-125
Out-of-bounds Read
CVE-2020-5833 2024-11-21 14:34 2020-05-12 Show GitHub Exploit DB Packet Storm
201909 7.8 HIGH
Local
jalinfotec pallet_control Improper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to execute arbitrary code with the SYSTEM privilege on the computer where PALLET CONTROL is installed via… NVD-CWE-noinfo
CVE-2020-5538 2024-11-21 14:34 2020-05-11 Show GitHub Exploit DB Packet Storm
201910 7.2 HIGH
Network
plex media_server Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code. CWE-502
 Deserialization of Untrusted Data
CVE-2020-5741 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm