Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229531 10 危険 proxim - Proxim Wireless Tsunami における重要な情報を取得される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5866 2012-12-20 19:10 2009-01-7 Show GitHub Exploit DB Packet Storm
229532 7.5 危険 v-gn - wBB 用の Userlocator モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5863 2012-12-20 19:10 2009-01-6 Show GitHub Exploit DB Packet Storm
229533 5 警告 webcamxp - webcamXP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5862 2012-12-20 19:10 2009-01-6 Show GitHub Exploit DB Packet Storm
229534 4 警告 シックス・アパート株式会社 - Six Apart MT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5846 2012-12-20 19:10 2009-01-5 Show GitHub Exploit DB Packet Storm
229535 7.5 危険 phpicalendar - PHP iCalendar における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5840 2012-12-20 19:10 2009-01-5 Show GitHub Exploit DB Packet Storm
229536 6.8 警告 web scribble solutions - Web Scribble Solutions webClassifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5817 2012-12-20 19:10 2009-01-2 Show GitHub Exploit DB Packet Storm
229537 7.5 危険 phpalumni - phpAlumni の Acomment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5815 2012-12-20 19:10 2009-01-2 Show GitHub Exploit DB Packet Storm
229538 7.5 危険 SPIP - SPIP の inc/rubriques.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5813 2012-12-20 19:10 2008-12-24 Show GitHub Exploit DB Packet Storm
229539 10 危険 SPIP - SPIP における脆弱性 CWE-noinfo
情報不足 		CVE-2008-5812 2012-12-20 19:10 2008-12-24 Show GitHub Exploit DB Packet Storm
229540 4.3 警告 TestLink Development Team - TestLink におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5807 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208571 8.8 HIGH
Network 		mozilla thunderbird When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, … CWE-787
 Out-of-bounds Write 		CVE-2020-26970 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
208572 8.8 HIGH
Network 		mozilla firefox Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl… CWE-787
 Out-of-bounds Write 		CVE-2020-26969 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
208573 8.8 HIGH
Network 		mozilla firefox
firefox_esr
thunderbird 		Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these… CWE-787
 Out-of-bounds Write 		CVE-2020-26968 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
208574 6.5 MEDIUM
Network 		mozilla firefox When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This w… NVD-CWE-noinfo
CVE-2020-26967 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
208575 6.5 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. *Note: Th… NVD-CWE-Other
CVE-2020-26966 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
208576 4.3 MEDIUM
Network 		mozilla firefox Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API calls. This vulnerability affects Firefox … NVD-CWE-noinfo
CVE-2020-26963 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
208577 6.5 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remember… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2020-26965 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
208578 6.8 MEDIUM
Network 		mozilla firefox If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to the feature and operated with the privile… NVD-CWE-noinfo
CVE-2020-26964 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
208579 6.1 MEDIUM
Network 		mozilla firefox Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across … CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2020-26962 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
208580 6.5 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver. However when an IPv4 address was mapped… NVD-CWE-noinfo
CVE-2020-26961 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm