Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229941	6.8	警告	source workshop	-	Web Directory Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4091	2012-12-20 18:52	2008-09-15	Show	GitHub Exploit DB Packet Storm

229942	7.5	危険	source workshop	-	Reciprocal Links Manager の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4086	2012-12-20 18:52	2008-09-15	Show	GitHub Exploit DB Packet Storm

229943	4.4	警告	stephenjungels	-	Plait の plaiter における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-4085	2012-12-20 18:52	2008-09-15	Show	GitHub Exploit DB Packet Storm

229944	7.5	危険	stash	-	Stash の admin/login.php における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-4081	2012-12-20 18:52	2008-09-15	Show	GitHub Exploit DB Packet Storm

229945	6.8	警告	stash	-	Stash における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4080	2012-12-20 18:52	2008-09-15	Show	GitHub Exploit DB Packet Storm

229946	7.5	危険	zanfi solutions	-	Zanfi Autodealers CMS AutOnline の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4074	2012-12-20 18:52	2008-09-15	Show	GitHub Exploit DB Packet Storm

229947	7.5	危険	zanfi solutions	-	Zanfi Autodealers CMS AutOnline の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4073	2012-12-20 18:52	2008-09-15	Show	GitHub Exploit DB Packet Storm

229948	7.5	危険	phsdev	-	phsBlog の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4072	2012-12-20 18:52	2008-09-15	Show	GitHub Exploit DB Packet Storm

229949	7.5	危険	texmedia	-	Million Pixel Script の tops_top.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4055	2012-12-20 18:52	2008-09-11	Show	GitHub Exploit DB Packet Storm

229950	4.6	警告	トレンドマイクロ	-	Trend Micro NSC モジュールの Trend Micro Personal Firewall サービスにおけるアクセス制限を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-3866	2012-12-20 18:52	2009-01-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208981	7.5	HIGH Network	hyland	onbase	An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by the FileName parameter.	CWE-22 Path Traversal	CVE-2020-25247	2024-11-21 14:17	2020-09-11	Show	GitHub Exploit DB Packet Storm

208982	7.8	HIGH Local	linux	linux_kernel	The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd->no_refcnt was not considered during a backport of a CVE-2020-14356 patch. …	CWE-416 Use After Free	CVE-2020-25220	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208983	7.5	HIGH Network	libproxy_project debian fedoraproject opensuse canonical	libproxy debian_linux fedora leap ubuntu_linux	url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. T…	CWE-674 Uncontrolled Recursion	CVE-2020-25219	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208984	7.3	HIGH Network	primekey	ejbca	An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is performed on that certificate. This vulnera…	CWE-295 Improper Certificate Validation	CVE-2020-25276	2024-11-21 14:17	2020-09-12	Show	GitHub Exploit DB Packet Storm

208985	7.8	HIGH Local	linux netapp	linux_kernel cloud_backup solidfire_\&_hci_management_node hci_compute_node solidfire_baseboard_management_controller solidfire\ _enterprise_sds_\&_hci_storage_node	get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page tha…	CWE-672 Operation on a Resource after Expiration or Release	CVE-2020-25221	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208986	9.8	CRITICAL Network	webdesi9	file_manager	The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to hav…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-25213	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208987	7.0	HIGH Local	linux debian opensuse canonical	linux_kernel debian_linux leap ubuntu_linux	A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nf…	CWE-787 CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-25212	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208988	6.0	MEDIUM Local	linux debian fedoraproject	linux_kernel debian_linux fedora	In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctn…	CWE-120 Classic Buffer Overflow	CVE-2020-25211	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208989	7.8	HIGH Local	gnupg gpg4win	gnupg gpg4win	GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD pre…	CWE-120 Classic Buffer Overflow	CVE-2020-25125	2024-11-21 14:17	2020-09-4	Show	GitHub Exploit DB Packet Storm

208990	4.8	MEDIUM Network	vbulletin	vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI.	CWE-79 Cross-site Scripting	CVE-2020-25124	2024-11-21 14:17	2020-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed