Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230011 4.3 警告 TYPO3 Association - TYPO3 用の eluna Page Comments エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5795 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
230012 6.8 警告 recly - Joomla! 用の clickheat コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5793 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
230013 10 危険 PrestaShop - PrestaShop e-Commerce Solution における脆弱性 CWE-noinfo
情報不足 		CVE-2008-5791 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
230014 7.5 危険 recly - Joomla! 用の competitions コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5790 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
230015 7.5 危険 recly - Joomla! 用の Recly Interactive feederator コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5789 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
230016 7.5 危険 v3chat - V3 Chat - Profiles/Dating Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5785 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
230017 7.5 危険 v3chat - V3 Chat - Profiles/Dating Script における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-5784 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
230018 7.5 危険 v3chat - V3 Chat Live Support の admin/index.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-5783 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
230019 7.5 危険 zeeways - ZeeMatri の bannerclick.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5782 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
230020 7.5 危険 phpweather - PHP Weather の test.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5771 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201961 5.9 MEDIUM
Network 		kubernetes ingress-nginx The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ing… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2020-8553 2024-11-21 14:39 2020-07-30 Show GitHub Exploit DB Packet Storm
201962 8.8 HIGH
Adjacent 		kubernetes kubernetes The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services boun… NVD-CWE-Other
CVE-2020-8558 2024-11-21 14:39 2020-07-28 Show GitHub Exploit DB Packet Storm
201963 3.3 LOW
Local 		huawei p30_firmware HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. The system does not properly authenticate the application that access a specifi… CWE-287
Improper Authentication 		CVE-2020-9077 2024-11-21 14:39 2020-07-27 Show GitHub Exploit DB Packet Storm
201964 5.5 MEDIUM
Local 		kubernetes kubernetes The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted i… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-8557 2024-11-21 14:39 2020-07-24 Show GitHub Exploit DB Packet Storm
201965 6.8 MEDIUM
Network 		kubernetes kubernetes The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an att… CWE-601
Open Redirect 		CVE-2020-8559 2024-11-21 14:39 2020-07-22 Show GitHub Exploit DB Packet Storm
201966 7.2 HIGH
Network 		gpononu 1ge_router_wifi_onu_v2801rw_firmware
1ge\+3fe\+wifi_onu_v2804rgw_firmware 		Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in … CWE-78
OS Command  		CVE-2020-8958 2024-11-21 14:39 2020-07-16 Show GitHub Exploit DB Packet Storm
201967 5.5 MEDIUM
Local 		openthread wpantund A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver (eg: d… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-8916 2024-11-21 14:39 2020-07-8 Show GitHub Exploit DB Packet Storm
201968 7.5 HIGH
Network 		envoyproxy envoy Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting too many connections. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-8663 2024-11-21 14:39 2020-07-2 Show GitHub Exploit DB Packet Storm
201969 6.5 MEDIUM
Network 		netapp hci_h610s_firmware The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default account and password that should be changed during the initial node setup. During up… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-8573 2024-11-21 14:39 2020-06-29 Show GitHub Exploit DB Packet Storm
201970 7.2 HIGH
Network 		johnsoncontrols exacqvision_web_service
exacqvision_enterprise_manager 		A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterpr… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-9047 2024-11-21 14:39 2020-06-27 Show GitHub Exploit DB Packet Storm