Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229561 7.5 危険 uochm - U&M Software Signup における脆弱性 CWE-287
不適切な認証 		CVE-2008-6717 2012-12-20 19:10 2009-04-13 Show GitHub Exploit DB Packet Storm
229562 7.5 危険 PreProject.com - Pre ADS Portal の homeadmin/adminhome.php における脆弱性 CWE-287
不適切な認証 		CVE-2008-6716 2012-12-20 19:10 2009-04-13 Show GitHub Exploit DB Packet Storm
229563 4.3 警告 PreProject.com - Pre ADS Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6715 2012-12-20 19:10 2009-04-13 Show GitHub Exploit DB Packet Storm
229564 7.5 危険 xecms - xeCMS の admin.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6714 2012-12-20 19:10 2009-04-10 Show GitHub Exploit DB Packet Storm
229565 5 警告 stalker-game - S.T.A.L.K.E.R.: Shadow of Chernobyl の MultipacketReciever::RecievePacket 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2008-6705 2012-12-20 19:10 2009-04-10 Show GitHub Exploit DB Packet Storm
229566 5 警告 stalker-game - S.T.A.L.K.E.R.: Shadow of Chernobyl の NET_Compressor::Decompress 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-6704 2012-12-20 19:10 2009-04-10 Show GitHub Exploit DB Packet Storm
229567 10 危険 stalker-game - S.T.A.L.K.E.R.: Shadow of Chernobyl の IPureServer::_Recieve 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6703 2012-12-20 19:10 2009-04-10 Show GitHub Exploit DB Packet Storm
229568 5 警告 stalker-game - S.T.A.L.K.E.R.: Shadow of Chernobyl におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6702 2012-12-20 19:10 2009-04-10 Show GitHub Exploit DB Packet Storm
229569 4.3 警告 TYPO3 Association - TYPO3 用の tjs_reslib エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6699 2012-12-20 19:10 2009-04-10 Show GitHub Exploit DB Packet Storm
229570 7.5 危険 sebastian baumann - TYPO3 用の Download system エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6693 2012-12-20 19:10 2009-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208481 7.5 HIGH
Local 		gnu
redhat
fedoraproject
netapp 		grub2
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server_tus
enterprise_linux_server_eus
fedora
ontap_select_deploy_administration_… 		A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity… NVD-CWE-Other
CVE-2020-27779 2024-11-21 14:21 2021-03-4 Show GitHub Exploit DB Packet Storm
208482 6.7 MEDIUM
Local 		gnu
redhat
fedoraproject
netapp 		grub2
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server_tus
enterprise_linux_server_eus
fedora
ontap_select_deploy_administration_… 		A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporar… - CVE-2020-27749 2024-11-21 14:21 2021-03-4 Show GitHub Exploit DB Packet Storm
208483 5.5 MEDIUM
Local 		gnu
netapp
oracle
debian 		glibc
ontap_select_deploy_administration_utility
a250_firmware
500f_firmware
h410c_firmware
h300s_firmware
h500s_firmware
h700s_firmware
h300e_firmware
h500e_firmware
h7… 		The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails t… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-27618 2024-11-21 14:21 2021-02-27 Show GitHub Exploit DB Packet Storm
208484 7.5 HIGH
Network 		restify-paginate_project restify-paginate The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exceptio… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-27543 2024-11-21 14:21 2021-02-26 Show GitHub Exploit DB Packet Storm
208485 7.5 HIGH
Network 		redhat jboss_fuse
openshift_application_runtimes
undertow 		A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a … - CVE-2020-27782 2024-11-21 14:21 2021-02-24 Show GitHub Exploit DB Packet Storm
208486 5.5 MEDIUM
Local 		libxls_project libxls An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It cou… - CVE-2020-27819 2024-11-21 14:21 2021-02-23 Show GitHub Exploit DB Packet Storm
208487 3.3 LOW
Local 		imagemagick
debian 		imagemagick
debian_linux 		In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0. - CVE-2020-27768 2024-11-21 14:21 2021-02-23 Show GitHub Exploit DB Packet Storm
208488 8.8 HIGH
Network 		solarwinds network_performance_monitor This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Authentication is required to exploit this… - CVE-2020-27869 2024-11-21 14:21 2021-02-12 Show GitHub Exploit DB Packet Storm
208489 9.8 CRITICAL
Network 		qognify ocularis This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395. Authentication is not required to exploit this vulnerability. The specifi… - CVE-2020-27868 2024-11-21 14:21 2021-02-12 Show GitHub Exploit DB Packet Storm
208490 6.8 MEDIUM
Adjacent 		netgear ac2100_firmware
ac2400_firmware
ac2600_firmware
r6700_firmware
r6800_firmware
r6900_firmware
r7200_firmware
r7350_firmware
r7400_firmware
r7450_firmware
r6220_firmware 		This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020… - CVE-2020-27867 2024-11-21 14:21 2021-02-12 Show GitHub Exploit DB Packet Storm