Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229621 6.9 警告 savonet - liguidsoap の liguidsoap.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4965 2012-12-20 18:52 2008-11-6 Show GitHub Exploit DB Packet Storm
229622 6.9 警告 tivano - cdrw-taper の amlabel-cdrw における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4945 2012-12-20 18:52 2008-11-5 Show GitHub Exploit DB Packet Storm
229623 6.2 警告 OpenOffice.org Project - OOo の senddoc における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4937 2012-12-20 18:52 2008-11-5 Show GitHub Exploit DB Packet Storm
229624 8.8 危険 visagesoft - VISAGESOFT eXPert PDF Viewer X ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4919 2012-12-20 18:52 2008-11-4 Show GitHub Exploit DB Packet Storm
229625 4.3 警告 SonicWALL - SonicWALL Pro 2040 などで使用されている SonicWALL SonicOS Enhanced におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4918 2012-12-20 18:52 2008-11-4 Show GitHub Exploit DB Packet Storm
229626 7.5 危険 rs maxsoft - RS MAXSOFT の fotogalerie モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4912 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229627 10 危険 サン・マイクロシステムズ - Sun Java Web Start の BasicService におけるクライアントマシン上で任意のプログラムを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4910 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229628 7.5 危険 w1n78 - e107 用の Lyrics プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4906 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229629 5 警告 typosphere - Typo におけるパスワードを推測される脆弱性 CWE-310
暗号の問題 		CVE-2008-4905 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229630 6 警告 typosphere - Typo の "ページを管理する" 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4904 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214901 7.5 HIGH
Network 		oppo coloros In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the s… CWE-908
 Use of Uninitialized Resource 		CVE-2020-11828 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
214902 7.8 HIGH
Local 		re2c
canonical 		re2c
ubuntu_linux 		re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme. CWE-787
 Out-of-bounds Write 		CVE-2020-11958 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
214903 9.8 CRITICAL
Network 		evenroute iqrouter_firmware IQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabilities in the web-panel because of Bash Shell Metacharacter Injection. Note: The vendor claims that this vulnera… CWE-78
OS Command  		CVE-2020-11963 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
214904 6.1 MEDIUM
Network 		bitcoin-abe_project bitcoin-abe Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception. CWE-79
Cross-site Scripting 		CVE-2020-11944 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
214905 7.5 HIGH
Network 		zohocorp manageengine_opmanager Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. CWE-306
Missing Authentication for Critical Function 		CVE-2020-11946 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
214906 8.8 HIGH
Network 		sonatype nexus_repository_manager_3 An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks withou… CWE-863
 Incorrect Authorization 		CVE-2020-11753 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
214907 6.1 MEDIUM
Network 		python-markdown2_project python-markdown2 python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute. CWE-79
Cross-site Scripting 		CVE-2020-11888 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
214908 6.1 MEDIUM
Network 		gtranslate translate_wordpress_with_gtranslate The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option. CWE-79
Cross-site Scripting 		CVE-2020-11930 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
214909 9.8 CRITICAL
Network 		davidlingren media_library_assistant In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin. NVD-CWE-noinfo
CVE-2020-11928 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
214910 9.1 CRITICAL
Network 		libming libming Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c. CWE-125
Out-of-bounds Read 		CVE-2020-11895 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm