Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229201 7.5 危険 xigla - Xigla Software Absolute Live Support .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6864 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229202 7.5 危険 xigla - Xigla Software Absolute Form Processor .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6863 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229203 7.5 危険 xigla - Absolute Content Rotator における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6862 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229204 7.5 危険 xigla - Xigla Software Absolute Newsletter における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6861 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229205 7.5 危険 xigla - Xigla Software Absolute Poll Manager XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6860 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229206 7.5 危険 xigla - Xigla Software Absolute Control Panel XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6859 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229207 7.5 危険 xigla - Absolute Banner Manager .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6858 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229208 7.5 危険 xigla - Absolute Podcast .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6857 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229209 7.5 危険 xigla - Xigla Software Absolute News Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6856 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
229210 7.5 危険 xigla - Xigla Software Absolute News Feed における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6855 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208521 4.9 MEDIUM
Network 		zammad zammad An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access Tickets. CWE-863
 Incorrect Authorization 		CVE-2020-26028 2024-11-21 14:19 2020-12-28 Show GitHub Exploit DB Packet Storm
208522 10.0 CRITICAL
Network 		browserup browserup_proxy BrowserUp Proxy allows you to manipulate HTTP requests and responses, capture HTTP content, and export performance data as a HAR file. BrowserUp Proxy works well as a standalone proxy server, but it … - CVE-2020-26282 2024-11-21 14:19 2020-12-25 Show GitHub Exploit DB Packet Storm
208523 8.5 HIGH
Network 		gohugo hugo Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering of Pandoc documents if these binaries are found in the system `%… CWE-78
OS Command  		CVE-2020-26284 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208524 7.5 HIGH
Network 		rust-lang async-h1 async-h1 is an asynchronous HTTP/1.1 parser for Rust (crates.io). There is a request smuggling vulnerability in async-h1 before version 2.3.0. This vulnerability affects any webserver that uses async… - CVE-2020-26281 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208525 6.1 MEDIUM
Network 		dbdeployer dbdeployer DBdeployer is a tool that deploys MySQL database servers easily. In DBdeployer before version 1.58.2, users unpacking a tarball may use a maliciously packaged tarball that contains symlinks to files … - CVE-2020-26277 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208526 5.3 MEDIUM
Network 		wireshark
oracle 		wireshark
zfs_storage_appliance_kit 		Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file CWE-120
Classic Buffer Overflow 		CVE-2020-26422 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208527 6.1 MEDIUM
Network 		jupyter jupyter_server The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version … - CVE-2020-26275 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208528 7.5 HIGH
Network 		tlslite-ng_project tlslite-ng tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before versions 0.7.6 and 0.8.0-alpha39, the code that performs decryption and padding c… - CVE-2020-26263 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208529 6.1 MEDIUM
Network 		niftypm nifty-pm Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution. CWE-79
Cross-site Scripting 		CVE-2020-26049 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208530 8.9 HIGH
Network 		openslides openslides OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input valid… CWE-79
Cross-site Scripting 		CVE-2020-26280 2024-11-21 14:19 2020-12-19 Show GitHub Exploit DB Packet Storm