Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229461 5.1 警告 visualshapers - ezContents におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7054 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
229462 6.5 警告 PreProject.com - Pre Projects Pre Real Estate Listings の profile.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-7052 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
229463 7.5 危険 yellowswordfish - Wordpress 用の Yellow Swordfish Simple Forum モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7040 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
229464 9.3 危険 oovoo - ooVoo の oovoo.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6953 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
229465 7.5 危険 webhost-panel - Bankoi WebHosting Control Panel の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6950 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
229466 6.5 警告 ScriptsFeed.com - ScriptsFeed Auto Classifieds における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6944 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
229467 6.5 警告 ScriptsFeed.com - ScriptsFeed Recipes Listing Portal における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6943 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
229468 6.5 警告 ScriptsFeed.com - ScriptsFeed Realtor Classifieds System における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6942 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
229469 7.5 危険 turnkeyforms - TurnkeyForms Web Hosting Directory のログイン機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6941 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
229470 7.5 危険 turnkeyforms - TurnkeyForms Web Hosting Directory におけるデータベースのバックアップを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6940 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208351 6.1 MEDIUM
Network 		joplin_project joplin Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note. CWE-79
Cross-site Scripting 		CVE-2020-28249 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
208352 6.5 MEDIUM
Network 		maxmind
debian
fedoraproject 		libmaxminddb
debian_linux
fedora 		libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c. CWE-125
Out-of-bounds Read 		CVE-2020-28241 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
208353 6.5 MEDIUM
Network 		asterisk
sangoma
fedoraproject
debian 		certified_asterisk
asterisk
fedora
debian_linux 		An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1 and Certified Asterisk before 16.8-cert5. If Asterisk is challenge… CWE-674
 Uncontrolled Recursion 		CVE-2020-28242 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
208354 8.8 HIGH
Network 		web-audimex audimexee SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path parameter. CWE-89
SQL Injection 		CVE-2020-28115 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
208355 5.4 MEDIUM
Network 		web-audimex audimexee AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration parameter "unique_error_numbers" is not set, remote attackers can inject arbit… CWE-79
Cross-site Scripting 		CVE-2020-28047 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
208356 9.8 CRITICAL
Network 		git_large_file_storage_project git_large_file_storage Git LFS 2.12.0 allows Remote Code Execution. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-27955 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
208357 6.3 MEDIUM
Local 		sddm_project
opensuse
debian
fedoraproject 		sddm
leap
debian_linux
fedora 		An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that - for a short time period - allows local unprivileged users to create a connection to the X server with… CWE-362
Race Condition 		CVE-2020-28049 2024-11-21 14:22 2020-11-5 Show GitHub Exploit DB Packet Storm
208358 7.8 HIGH
Local 		pax prolinos An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user (MAINAPP) can escalate to root privileges by exploiting the setuid install… CWE-269
 Improper Privilege Management 		CVE-2020-28046 2024-11-21 14:22 2020-11-3 Show GitHub Exploit DB Packet Storm
208359 6.8 MEDIUM
Physics 		pax prolinos An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite f… CWE-276
Incorrect Default Permissions  		CVE-2020-28044 2024-11-21 14:22 2020-11-3 Show GitHub Exploit DB Packet Storm
208360 7.5 HIGH
Network 		misp misp MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-28043 2024-11-21 14:22 2020-11-3 Show GitHub Exploit DB Packet Storm