Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229751	4.3	警告	web-album	-	WEBalbum の photo_add-c.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2698	2012-12-20 18:52	2008-06-13	Show	GitHub Exploit DB Packet Storm

229752	7.5	危険	phpinv	-	phpInv の entry.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2695	2012-12-20 18:52	2008-06-13	Show	GitHub Exploit DB Packet Storm

229753	4.3	警告	phpinv	-	phpInv の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2694	2012-12-20 18:52	2008-06-13	Show	GitHub Exploit DB Packet Storm

229754	7.5	危険	PilotCart	-	ASPilot Pilot Cart の pilot.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2688	2012-12-20 18:52	2008-06-13	Show	GitHub Exploit DB Packet Storm

229755	7.5	危険	promanager	-	ProManager の inc/config.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2687	2012-12-20 18:52	2008-06-13	Show	GitHub Exploit DB Packet Storm

229756	7.5	危険	realm project	-	Realm CMS の _RealmAdmin/login.asp における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2682	2012-12-20 18:52	2008-06-12	Show	GitHub Exploit DB Packet Storm

229757	5	警告	realm project	-	Realm CMS における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-2681	2012-12-20 18:52	2008-06-12	Show	GitHub Exploit DB Packet Storm

229758	4.3	警告	realm project	-	Realm CMS の _db/compact.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2680	2012-12-20 18:52	2008-06-12	Show	GitHub Exploit DB Packet Storm

229759	7.5	危険	realm project	-	Realm CMS の _includes/inc_routines.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2679	2012-12-20 18:52	2008-06-12	Show	GitHub Exploit DB Packet Storm

229760	7.5	危険	telephone	-	Telephone Directory 2008 における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2678	2012-12-20 18:52	2008-06-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209301	7.8	HIGH Local	microsoft	windows_server_2016 windows_10	An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1209	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

209302	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is u…	NVD-CWE-noinfo	CVE-2020-1208	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

209303	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE I…	CWE-416 Use After Free	CVE-2020-1207	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

209304	7.5	HIGH Network	microsoft	windows_server_2016 windows_10	An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclos…	CWE-908 Use of Uninitialized Resource	CVE-2020-1206	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

209305	7.1	HIGH Local	microsoft	windows_server_2019 windows_10 windows_server_2016	An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Pri…	NVD-CWE-noinfo	CVE-2020-1204	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

209306	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019 visual_studio visual_studio_2019 visual_studio_2017	An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Stand…	NVD-CWE-noinfo	CVE-2020-1203	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

209307	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019 visual_studio visual_studio_2019 visual_studio_2017	An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Stand…	NVD-CWE-noinfo	CVE-2020-1202	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

209308	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows Now Playing Session Manager Elevation of Privilege Vulnerabil…	NVD-CWE-noinfo	CVE-2020-1201	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

209309	7.8	HIGH Local	microsoft	windows_10	An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback Hub Elevation of Privilege Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1199	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

209310	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1197	2024-11-21 14:09	2020-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed