Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229701	7.5	危険	tuned studios	-	Tuned Studios Subwoofer などの Web ページテンプレートにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0231	2012-12-20 18:34	2008-01-10	Show	GitHub Exploit DB Packet Storm

229702	6.4	警告	Xine	-	xine-lib の input/libreal/rmff.c におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0225	2012-12-20 18:34	2008-01-10	Show	GitHub Exploit DB Packet Storm

229703	7.5	危険	runcms	-	RunCMS の Newbb_plus モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0224	2012-12-20 18:34	2008-01-10	Show	GitHub Exploit DB Packet Storm

229704	7.5	危険	WordPress.org	-	WordPress 用の Wp-FileManager プラグインにおける任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-0222	2012-12-20 18:34	2008-01-10	Show	GitHub Exploit DB Packet Storm

229705	6.4	警告	uebimiau	-	Uebimiau Webmail における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-0210	2012-12-20 18:34	2008-01-9	Show	GitHub Exploit DB Packet Storm

229706	5.8	警告	snitz forums 2000	-	Snitz Forums 2000 の Forums/login.asp におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2008-0209	2012-12-20 18:34	2008-01-9	Show	GitHub Exploit DB Packet Storm

229707	4.3	警告	snitz forums 2000	-	Snitz Forums 2000 の login.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0208	2012-12-20 18:34	2008-01-9	Show	GitHub Exploit DB Packet Storm

229708	4.3	警告	pro search	-	PRO-Search におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0207	2012-12-20 18:34	2008-01-9	Show	GitHub Exploit DB Packet Storm

229709	4.3	警告	WordPress.org	-	WordPress 用の Captcha! プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0206	2012-12-20 18:34	2008-01-9	Show	GitHub Exploit DB Packet Storm

229710	4.3	警告	WordPress.org	-	WordPress 用の Math Comment Spam Protection プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0205	2012-12-20 18:34	2008-01-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214261	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevatio…	NVD-CWE-noinfo	CVE-2020-0844	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

214262	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require …	NVD-CWE-noinfo	CVE-2020-0843	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

214263	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require …	NVD-CWE-noinfo	CVE-2020-0842	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

214264	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-…	NVD-CWE-noinfo	CVE-2020-0841	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

214265	7.8	HIGH Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0841, CVE-…	NVD-CWE-noinfo	CVE-2020-0840	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

214266	7.8	HIGH Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitr…	NVD-CWE-noinfo	CVE-2020-0834	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

214267	7.5	HIGH Network	microsoft	internet_explorer	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID i…	CWE-787 Out-of-bounds Write	CVE-2020-0833	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

214268	7.5	HIGH Network	microsoft	internet_explorer	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID i…	CWE-787 Out-of-bounds Write	CVE-2020-0832	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

214269	7.5	HIGH Network	microsoft	chakracore edge	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique f…	CWE-787 Out-of-bounds Write	CVE-2020-0831	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

214270	7.5	HIGH Network	microsoft	internet_explorer chakracore edge	A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is un…	CWE-787 Out-of-bounds Write	CVE-2020-0830	2024-11-21 13:54	2020-03-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed