Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229671	7.5	危険	TYPO3 Association	-	TYPO3 用の TU-Clausthal Staff エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6344	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229672	4.3	警告	TYPO3 Association	-	TYPO3 用の TU-Clausthal ODIN エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6343	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229673	4.3	警告	TYPO3 Association	-	TYPO3 用の SB Universal Plugin エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6341	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229674	7.5	危険	weber-ebusiness	-	TYPO3 用の WEBERkommunal Facilities エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6338	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229675	4.3	警告	rightscripts	-	Text Lines Rearrange Script の download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6336	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229676	7.5	危険	simplecustomer	-	Simple Customer の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6332	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229677	6	警告	streber-pm	-	Streber におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-6331	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229678	7.5	危険	PreProject.com	-	Pre ASP Job Board の Employee/login.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6329	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229679	7.5	危険	simplecustomer	-	Simple Customer の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6326	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229680	4.3	警告	SoftbizScripts	-	Softbiz Classifieds Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6325	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208581	5.4	MEDIUM Adjacent	bluetooth fedoraproject intel	bluetooth_core_specification fedora ax210_firmware ax201_firmware ax200_firmware ac_9560_firmware ac_9462_firmware ac_9461_firmware ac_9260_firmware ac_8265_firmware ac_…	Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing witho…	CWE-863 Incorrect Authorization	CVE-2020-26555	2024-11-21 14:20	2021-05-25	Show	GitHub Exploit DB Packet Storm

208582	5.7	MEDIUM Physics	nordicsemi	nrf52840_firmware	Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection (APPROTECT) can be bypassed by injecting a fault during…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-27211	2024-11-21 14:20	2021-05-21	Show	GitHub Exploit DB Packet Storm

208583	7.0	HIGH Local	st	stm32cubel4_firmware	STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP) can be degraded from RDP level 2 (no access via debug interface) to level 1 (l…	CWE-74 Injection	CVE-2020-27212	2024-11-21 14:20	2021-05-21	Show	GitHub Exploit DB Packet Storm

208584	6.8	MEDIUM Physics	solokeys nitrokey	solo_firmware somu_firmware fido2_firmware	The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade …	CWE-326 Inadequate Encryption Strength	CVE-2020-27208	2024-11-21 14:20	2021-05-21	Show	GitHub Exploit DB Packet Storm

208585	7.5	HIGH Network	micro-ecc_project	micro-ecc	The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key.	NVD-CWE-noinfo	CVE-2020-27209	2024-11-21 14:20	2021-05-21	Show	GitHub Exploit DB Packet Storm

208586	7.5	HIGH Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-27185	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

208587	5.9	MEDIUM Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to Man-in-th…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-27184	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

208588	7.5	HIGH Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if “Pre-…	NVD-CWE-noinfo	CVE-2020-27150	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

208589	6.5	MEDIUM Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration chan…	NVD-CWE-noinfo	CVE-2020-27149	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

208590	7.5	HIGH Network	kaspersky	password_manager	Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker woul…	CWE-326 Inadequate Encryption Strength	CVE-2020-27020	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed