Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229701 7.5 危険 PreProject.com - E-SMART CART の productsofcat.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2917 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
229702 6.8 警告 PreProject.com - Pre ADS Portal における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2916 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
229703 7.5 危険 PreProject.com - Pre Job Board の jobseekers/JobSearch.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2915 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
229704 7.5 危険 PreProject.com - PHP JOBWEBSITE PRO の jobseekers/JobSearch3.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2914 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
229705 6.8 警告 webchamado - WebChamado の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2907 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
229706 6.8 警告 webchamado - WebChamado の lista_anexos.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2906 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
229707 7.5 危険 phpmycart - Conkurent PHPMyCart の shop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2904 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
229708 7.5 危険 phpauction - PHPAuction の item.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2900 2012-12-20 18:52 2008-06-27 Show GitHub Exploit DB Packet Storm
229709 6.8 警告 wise-ftp - AceBIT WISE-FTP の FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-2889 2012-12-20 18:52 2008-06-27 Show GitHub Exploit DB Packet Storm
229710 9.3 危険 rss aggregator - RSS-aggregator の display.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-2884 2012-12-20 18:52 2008-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209291 9.0 CRITICAL
Adjacent
microsoft windows_server_2012
windows_server_2016
windows_server_2008
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX… CWE-20
 Improper Input Validation 
CVE-2020-1041 2024-11-21 14:09 2020-07-15 Show GitHub Exploit DB Packet Storm
209292 9.0 CRITICAL
Adjacent
microsoft windows_server_2012
windows_server_2016
windows_server_2008
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX… CWE-20
 Improper Input Validation 
CVE-2020-1040 2024-11-21 14:09 2020-07-15 Show GitHub Exploit DB Packet Storm
209293 9.0 CRITICAL
Adjacent
microsoft windows_server_2012
windows_server_2016
windows_server_2008
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX… CWE-20
 Improper Input Validation 
CVE-2020-1036 2024-11-21 14:09 2020-07-15 Show GitHub Exploit DB Packet Storm
209294 9.0 CRITICAL
Adjacent
microsoft windows_server_2012
windows_server_2016
windows_server_2008
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX… CWE-20
 Improper Input Validation 
CVE-2020-1032 2024-11-21 14:09 2020-07-15 Show GitHub Exploit DB Packet Storm
209295 9.8 CRITICAL
Network
microsoft sharepoint_foundation
sharepoint_enterprise_server
sharepoint_server
lync
skype_for_business
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vuln… CWE-20
 Improper Input Validation 
CVE-2020-1025 2024-11-21 14:09 2020-07-15 Show GitHub Exploit DB Packet Storm
209296 7.5 HIGH
Network
microsoft internet_explorer A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-121… NVD-CWE-noinfo
CVE-2020-1215 2024-11-21 14:09 2020-06-10 Show GitHub Exploit DB Packet Storm
209297 7.5 HIGH
Network
microsoft internet_explorer A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-121… NVD-CWE-noinfo
CVE-2020-1214 2024-11-21 14:09 2020-06-10 Show GitHub Exploit DB Packet Storm
209298 7.5 HIGH
Network
microsoft internet_explorer A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-121… CWE-787
 Out-of-bounds Write
CVE-2020-1213 2024-11-21 14:09 2020-06-10 Show GitHub Exploit DB Packet Storm
209299 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim s… NVD-CWE-noinfo
CVE-2020-1212 2024-11-21 14:09 2020-06-10 Show GitHub Exploit DB Packet Storm
209300 7.8 HIGH
Local
microsoft windows_10
windows_server_2016
windows_server_2019
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnera… NVD-CWE-noinfo
CVE-2020-1211 2024-11-21 14:09 2020-06-10 Show GitHub Exploit DB Packet Storm