Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229231 10 危険 technote - Technote の skin_shop/standard/3_plugin_twindow/twindow_notice.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4138 2012-12-20 18:52 2008-09-24 Show GitHub Exploit DB Packet Storm
229232 7.8 危険 s60 - Nokia E90 Communicator および Nseries N82 上で稼動している Symbian OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4135 2012-12-20 18:52 2008-09-19 Show GitHub Exploit DB Packet Storm
229233 7.5 危険 phprealty - phpRealty の manager/static/view.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4134 2012-12-20 18:52 2008-09-19 Show GitHub Exploit DB Packet Storm
229234 5 警告 phpBB - phpBB の search 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-4125 2012-12-20 18:52 2008-09-18 Show GitHub Exploit DB Packet Storm
229235 7.8 危険 サン・マイクロシステムズ - SunMC の PRM モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-4117 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229236 5 警告 talkback - TalkBack における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-4115 2012-12-20 18:52 2008-09-16 Show GitHub Exploit DB Packet Storm
229237 7.2 危険 Python Software Foundation - Python の Tools/faqwiz/move-faqwiz.sh における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4108 2012-12-20 18:52 2008-09-18 Show GitHub Exploit DB Packet Storm
229238 5.1 警告 WordPress.org - WordPress におけるユーザパスワードを任意の値に変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4106 2012-12-20 18:52 2008-09-8 Show GitHub Exploit DB Packet Storm
229239 8.5 危険 The phpMyAdmin Project - phpMyAdmin の libraries/database_interface.lib.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4096 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229240 7.5 危険 Ruby on Rails project - Ruby on Rails における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4094 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214811 8.6 HIGH
Network 		yubico yubikey_one_time_password_validation_server The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP v… CWE-294
Authentication Bypass by Capture-replay  		CVE-2020-10185 2024-11-21 13:54 2020-03-6 Show GitHub Exploit DB Packet Storm
214812 7.5 HIGH
Network 		yubico yubikey_one_time_password_validation_server The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of service, aka SQL injection. NOTE: this issue … CWE-89
SQL Injection 		CVE-2020-10184 2024-11-21 13:54 2020-03-6 Show GitHub Exploit DB Packet Storm
214813 9.8 CRITICAL
Network 		eset nod32_antivirus
smart_security
mobile_security
smart_tv_security
cyber_security 		The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antiviru… CWE-436
 Interpretation Conflict 		CVE-2020-10180 2024-11-21 13:54 2020-03-6 Show GitHub Exploit DB Packet Storm
214814 7.0 HIGH
Local 		timeshift_project
fedoraproject
canonical 		timeshift
fedora
ubuntu_linux 		init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses… CWE-362
CWE-59
Race Condition
Link Following 		CVE-2020-10174 2024-11-21 13:54 2020-03-6 Show GitHub Exploit DB Packet Storm
214815 8.8 HIGH
Network 		comtrend vr-3033_firmware Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metac… CWE-78
OS Command  		CVE-2020-10173 2024-11-21 13:54 2020-03-6 Show GitHub Exploit DB Packet Storm
214816 5.4 MEDIUM
Network 		phpgurukul daily_expense_tracker_system PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php. CWE-79
Cross-site Scripting 		CVE-2020-10107 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
214817 9.8 CRITICAL
Network 		phpgurukul daily_expense_tracker_system PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database an… CWE-89
SQL Injection 		CVE-2020-10106 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
214818 5.3 MEDIUM
Network 		zammad zammad An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS request, rather than a GET request. Disclosure of source code allows for an at… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2020-10105 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
214819 4.3 MEDIUM
Network 		zammad zammad An issue was discovered in Zammad 3.0 through 3.2. After authentication, it transmits sensitive information to the user that may be compromised and used by an attacker to gain unauthorized access. Ha… CWE-200
Information Exposure 		CVE-2020-10104 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
214820 5.4 MEDIUM
Network 		zammad zammad An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the File Upload functionality in Zammad. The malicious JavaScript will execute w… CWE-79
Cross-site Scripting 		CVE-2020-10103 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm