Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229481 7.5 危険 tpvgames - MPCS の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2293 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
229482 7.5 危険 シマンテック - Symantec Altiris Deployment Solution の axengine.exe における暗号化されたドメイン資格情報を推測される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-2291 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
229483 7.2 危険 シマンテック - Symantec Altiris Deployment Solution の Agent ユーザインターフェースにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2290 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
229484 7.2 危険 シマンテック - Symantec Altiris Deployment Solution の tooltip 要素における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2289 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
229485 3.6 注意 シマンテック - Symantec Altiris Deployment Solution におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2288 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
229486 7.2 危険 シマンテック - Symantec Altiris Deployment Solution における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2287 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
229487 7.5 危険 シマンテック - Symantec Altiris Deployment Solution の axengine.exe における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2286 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
229488 5 警告 Canonical - Ubuntu Linux 上で稼動する ssh-vulnkey ツールにおける CVE-2008-0166 を悪用される脆弱性 CWE-310
暗号の問題 		CVE-2008-2285 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
229489 7.5 危険 thomas voecking - Internet Photoshow および Internet Photoshow SE の admin.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-2282 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
229490 4.3 警告 scriptphp - Script PHP PicEngine の admin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2280 2012-12-20 18:52 2008-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209371 6.8 MEDIUM
Adjacent 		ti real-time_operating_system
z-stack
15.4-stack
openthread
easylink
ble5-stack
dynamic_multi-protocal_manager 		TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an authenticated-and-MITM-protection key c… CWE-863
 Incorrect Authorization 		CVE-2020-16630 2024-11-21 14:07 2021-09-21 Show GitHub Exploit DB Packet Storm
209372 7.5 HIGH
Network 		crestron dm-nvx-dir-80_firmware
dm-nvx-dir-160_firmware
dm-nvx-dir-ent_firmware 		On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be changed by sending an unauthenticated WebSocket request. CWE-287
Improper Authentication 		CVE-2020-16839 2024-11-21 14:07 2021-07-30 Show GitHub Exploit DB Packet Storm
209373 5.4 MEDIUM
Network 		dedecms dedecms A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter. CWE-79
Cross-site Scripting 		CVE-2020-16632 2024-11-21 14:07 2021-05-15 Show GitHub Exploit DB Packet Storm
209374 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019 		Microsoft Windows Security Feature Bypass Vulnerability NVD-CWE-noinfo
CVE-2020-17162 2024-11-21 14:07 2021-02-26 Show GitHub Exploit DB Packet Storm
209375 7.8 HIGH
Local 		we-con levistudiou Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially crafted project file could allow an attacker to exploit and… CWE-787
 Out-of-bounds Write 		CVE-2020-16243 2024-11-21 14:07 2021-02-24 Show GitHub Exploit DB Packet Storm
209376 9.8 CRITICAL
Network 		phpok phpok PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the targe… CWE-89
SQL Injection 		CVE-2020-16629 2024-11-21 14:07 2021-02-9 Show GitHub Exploit DB Packet Storm
209377 6.3 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() r… CWE-787
 Out-of-bounds Write 		CVE-2020-17380 2024-11-21 14:07 2021-01-30 Show GitHub Exploit DB Packet Storm
209378 6.1 MEDIUM
Network 		owncloud owncloud ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.' CWE-79
Cross-site Scripting 		CVE-2020-16255 2024-11-21 14:07 2021-01-16 Show GitHub Exploit DB Packet Storm
209379 9.9 CRITICAL
Network 		usvn usvn USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the… CWE-78
OS Command  		CVE-2020-17363 2024-11-21 14:07 2020-12-31 Show GitHub Exploit DB Packet Storm
209380 8.8 HIGH
Network 		1e client The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a T… CWE-74
CWE-668
Injection
 Exposure of Resource to Wrong Sphere 		CVE-2020-16268 2024-11-21 14:07 2020-12-30 Show GitHub Exploit DB Packet Storm