Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229951	4.3	警告	TYPO3 Association	-	TYPO3 用の WT Gallery エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2526	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

229952	4.3	警告	TYPO3 Association	-	TYPO3 用の Event Database エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2525	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

229953	7.5	危険	raknet	-	RakNet の Autopatcher サーバプラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2523	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

229954	6.5	警告	YABSoft	-	YABSoft Mega File Hosting Script の members.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2521	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

229955	2.1	注意	sarab	-	SaraB の sarab.sh スクリプトにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-2517	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

229956	5	警告	シマンテック	-	Symantec Backup Exec System Recovery Manager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2512	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

229957	7.5	危険	WordPress.org	-	WordPress 用 Upload File プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2510	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

229958	4.3	警告	tr script news	-	Tr Script News の news.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2508	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

229959	7.5	危険	simpel side	-	Simpel Side Weblosning における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2506	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

229960	4.3	警告	simpel side	-	Simpel Side Weblosning の result.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2505	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209261	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could run proc…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-1122	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

209262	5.5	MEDIUM Local	microsoft	windows_server_2016 windows_10	<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to fur…	NVD-CWE-noinfo	CVE-2020-1119	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

209263	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when the <a href="https://technet.microsoft.com/library/security/dn848375.aspx#CLFS">Windows Common Log File System (CLFS)</a> driver improperly hand…	NVD-CWE-noinfo	CVE-2020-1115	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

209264	7.8	HIGH Local	microsoft	windows_10	<p>An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run pro…	NVD-CWE-noinfo	CVE-2020-1098	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

209265	6.5	MEDIUM Network	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain…	NVD-CWE-noinfo	CVE-2020-1097	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

209266	6.5	MEDIUM Network	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain…	NVD-CWE-noinfo	CVE-2020-1091	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

209267	5.5	MEDIUM Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	<p>An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could ob…	NVD-CWE-noinfo	CVE-2020-1083	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

209268	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	<p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbi…	NVD-CWE-noinfo	CVE-2020-1074	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

209269	4.2	MEDIUM Network	microsoft	edge chakracore	<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could …	CWE-787 Out-of-bounds Write	CVE-2020-1057	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

209270	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.…	NVD-CWE-noinfo	CVE-2020-1053	2024-11-21 14:09	2020-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed