Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229401 9.3 危険 Twibright Labs - Links における脆弱性 CWE-59
リンク解釈の問題
CVE-2008-3329 2012-12-20 18:52 2008-07-27 Show GitHub Exploit DB Packet Storm
229402 7.6 危険 レッドハット - Cygwin の setup.exe における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-3323 2012-12-20 18:52 2008-07-28 Show GitHub Exploit DB Packet Storm
229403 5 警告 zdaemon - ZDaemon におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-3314 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
229404 7.5 危険 PreProject.com - Pre Survey Poll の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3310 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
229405 7.5 危険 youtube blog - C. Desseno ytb の todos.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3307 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
229406 7.5 危険 youtube blog - C. Desseno ytb の info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3306 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
229407 5 警告 tuxplanet - BilboBlog における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-3304 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
229408 6.8 警告 tuxplanet - BilboBlog の admin/login.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-3303 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
229409 6 警告 tuxplanet - BilboBlog の admin/delete.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3302 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
229410 3.5 注意 tuxplanet - BilboBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3301 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214641 8.8 HIGH
Network
microsoft publisher
powerpoint
word
access
visio
excel
outlook
office
project
office_365_proplus
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CV… NVD-CWE-noinfo
CVE-2020-0760 2024-11-21 13:54 2020-04-16 Show GitHub Exploit DB Packet Storm
214642 5.5 MEDIUM
Local
microsoft windows_server_2016
windows_10
windows_server_2019
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020… NVD-CWE-noinfo
CVE-2020-0699 2024-11-21 13:54 2020-04-16 Show GitHub Exploit DB Packet Storm
214643 8.8 HIGH
Network
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'. NVD-CWE-noinfo
CVE-2020-0687 2024-11-21 13:54 2020-04-16 Show GitHub Exploit DB Packet Storm
214644 7.2 HIGH
Network
sonatype nexus Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. CWE-20
 Improper Input Validation 
CVE-2020-10204 2024-11-21 13:54 2020-04-2 Show GitHub Exploit DB Packet Storm
214645 4.8 MEDIUM
Network
sonatype nexus Sonatype Nexus Repository before 3.21.2 allows XSS. CWE-79
Cross-site Scripting
CVE-2020-10203 2024-11-21 13:54 2020-04-2 Show GitHub Exploit DB Packet Storm
214646 8.8 HIGH
Network
sonatype nexus Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2020-10199 2024-11-21 13:54 2020-04-2 Show GitHub Exploit DB Packet Storm
214647 6.5 MEDIUM
Network
zimbra zm-mailbox cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the… CWE-862
 Missing Authorization
CVE-2020-10194 2024-11-21 13:54 2020-03-21 Show GitHub Exploit DB Packet Storm
214648 6.5 MEDIUM
Network
cpanel cpanel cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547). NVD-CWE-noinfo
CVE-2020-10122 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
214649 9.8 CRITICAL
Network
cpanel cpanel cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs (SEC-546). NVD-CWE-Other
CVE-2020-10121 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
214650 7.2 HIGH
Network
cpanel cpanel cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545). NVD-CWE-noinfo
CVE-2020-10120 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm