Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229851 7.5 危険 phpweather - PHP Weather の test.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5771 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229852 4.3 警告 phpweather - PHP Weather の config/make_config.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5770 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229853 7.5 危険 sirium - XOOPS 用の AM Events モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5768 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229854 6.8 警告 phparanoid - PHParanoid におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-5758 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229855 3.5 注意 Textpattern - Textpattern の textarea/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5757 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229856 4.3 警告 WordPress.org - WordPress 用の Page Flip Image Gallery プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5752 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229857 7.5 危険 Pligg - Pligg CMS の evb/check_url.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5739 2012-12-20 19:10 2008-12-26 Show GitHub Exploit DB Packet Storm
229858 7.5 危険 PHP-Fusion - PHP-Fusion 用の Team Impact TI Blog System モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5733 2012-12-20 19:10 2008-12-26 Show GitHub Exploit DB Packet Storm
229859 7.5 危険 stormboards aaronnemisis - stormBoards の thread.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5726 2012-12-20 19:10 2008-12-26 Show GitHub Exploit DB Packet Storm
229860 10 危険 sawstudio - SAWStudio におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5722 2012-12-20 19:10 2008-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202031 7.8 HIGH
Local 		douzone nbbdownloader.ocx NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker c… CWE-88
Argument Injection 		CVE-2020-7850 2024-11-21 14:37 2021-03-30 Show GitHub Exploit DB Packet Storm
202032 8.8 HIGH
Network 		freebsd freebsd In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd(8) bug in the implementation of the file system s… NVD-CWE-Other
CVE-2020-7468 2024-11-21 14:37 2021-03-27 Show GitHub Exploit DB Packet Storm
202033 7.6 HIGH
Physics 		freebsd freebsd In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on h… CWE-269
 Improper Privilege Management 		CVE-2020-7467 2024-11-21 14:37 2021-03-27 Show GitHub Exploit DB Packet Storm
202034 5.5 MEDIUM
Local 		freebsd
apple 		freebsd
safari
macos
icloud
itunes
iphone_os
tvos
watchos
ipados 		In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free… CWE-416
 Use After Free 		CVE-2020-7463 2024-11-21 14:37 2021-03-27 Show GitHub Exploit DB Packet Storm
202035 5.3 MEDIUM
Network 		freebsd freebsd In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure(4) device driver caused… CWE-74
Injection 		CVE-2020-7464 2024-11-21 14:37 2021-03-27 Show GitHub Exploit DB Packet Storm
202036 5.5 MEDIUM
Local 		freebsd freebsd In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the kernel causes a use-after-free bug by sending IPv6 Hop-by-Hop options over the loopback interface. The use… CWE-416
 Use After Free 		CVE-2020-7462 2024-11-21 14:37 2021-03-27 Show GitHub Exploit DB Packet Storm
202037 7.3 HIGH
Network 		freebsd
siemens 		freebsd
simatic_rf350m_firmware
simatic_rf650m_firmware 		In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input rel… CWE-787
 Out-of-bounds Write 		CVE-2020-7461 2024-11-21 14:37 2021-03-27 Show GitHub Exploit DB Packet Storm
202038 7.8 HIGH
Local 		hmtalk daviewindy DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code exec… CWE-787
 Out-of-bounds Write 		CVE-2020-7852 2024-11-21 14:37 2021-03-25 Show GitHub Exploit DB Packet Storm
202039 9.8 CRITICAL
Network 		tobesoft xplatform An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An attacker can exploit arbitrary code execution. CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2020-7853 2024-11-21 14:37 2021-03-25 Show GitHub Exploit DB Packet Storm
202040 9.8 CRITICAL
Network 		markany maepsbroker In MaEPSBroker 2.5.0.31 and prior, a command injection vulnerability caused by improper input validation checks when parsing brokerCommand parameter. CWE-20
 Improper Input Validation  		CVE-2020-7839 2024-11-21 14:37 2021-03-25 Show GitHub Exploit DB Packet Storm