Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229871 2.6 注意 rPath, Inc - rPath Appliance Platform Agent の rootpw プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-2140 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
229872 6.5 警告 rPath, Inc - rPath Appliance Platform Agent の rootpw プラグインにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-2139 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
229873 7.5 危険 visualshapers - VisualShapers ezContents における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2135 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
229874 6.8 警告 tru-zone - Tru-Zone Nuke ET の Journal モジュールにおける任意のユーザアカウントへのアクセス権を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2008-2134 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
229875 4.3 警告 tru-zone - Tru-Zone Nuke ET の Journal モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2133 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
229876 7.5 危険 systementor - Systementor PostcardMentor の step1.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2132 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
229877 4.3 警告 tux cms - Tux CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2126 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
229878 4.3 警告 SAP - SAP ITS の WGate におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2123 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
229879 7.5 危険 project alumni - Project Alumni の info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2118 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
229880 4.3 警告 project alumni - Project Alumni の pages/news.page.inc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2117 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214311 9.1 CRITICAL
Network
ufactory xarm_studio No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio … NVD-CWE-noinfo
CVE-2020-10284 2024-11-21 13:55 2020-07-16 Show GitHub Exploit DB Packet Storm
214312 7.5 HIGH
Network
samba
fedoraproject
opensuse
debian
samba
fedora
leap
debian_linux
A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-10745 2024-11-21 13:55 2020-07-7 Show GitHub Exploit DB Packet Storm
214313 6.5 MEDIUM
Network
samba
redhat
opensuse
fedoraproject
debian
samba
storage
leap
fedora
debian_linux
A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped wit… CWE-476
CWE-416
 NULL Pointer Dereference
 Use After Free
CVE-2020-10730 2024-11-21 13:55 2020-07-7 Show GitHub Exploit DB Packet Storm
214314 9.8 CRITICAL
Network
dronecode micro_air_vehicle_link The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor authorization) whichs leads to a variety of attacks including identity spoofing, unauthorize… CWE-306
Missing Authentication for Critical Function
CVE-2020-10282 2024-11-21 13:55 2020-07-4 Show GitHub Exploit DB Packet Storm
214315 7.5 HIGH
Network
dronecode micro_air_vehicle_link This vulnerability applies to the Micro Air Vehicle Link (MAVLink) protocol and allows a remote attacker to gain access to sensitive information provided it has access to the communication medium. MA… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-10281 2024-11-21 13:55 2020-07-4 Show GitHub Exploit DB Packet Storm
214316 7.5 HIGH
Network
honeywell controledge_plc_firmware
controledge_rtu_firmware
ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-10628 2024-11-21 13:55 2020-06-27 Show GitHub Exploit DB Packet Storm
214317 7.5 HIGH
Network
honeywell controledge_plc_firmware
controledge_rtu_firmware
ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-10624 2024-11-21 13:55 2020-06-27 Show GitHub Exploit DB Packet Storm
214318 5.5 MEDIUM
Local
apache
netapp
activemq_artemis
oncommand_workflow_automation
A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properti… CWE-312
CWE-522
 Cleartext Storage of Sensitive Information
 Insufficiently Protected Credentials
CVE-2020-10727 2024-11-21 13:55 2020-06-27 Show GitHub Exploit DB Packet Storm
214319 6.5 MEDIUM
Network
redhat
fedoraproject
opensuse
linuxfoundation
canonical
ceph_storage
openstack
fedora
leap
ceph
ubuntu_linux
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the Exp… CWE-74
Injection
CVE-2020-10753 2024-11-21 13:55 2020-06-27 Show GitHub Exploit DB Packet Storm
214320 7.8 HIGH
Local
python
fedoraproject
canonical
pillow
fedora
ubuntu_linux
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c. CWE-120
Classic Buffer Overflow
CVE-2020-10379 2024-11-21 13:55 2020-06-26 Show GitHub Exploit DB Packet Storm