Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230011	5	警告	ソフォス	-	Microsoft Exchange 用の PureMessage におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2008-7104	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

230012	6.8	警告	qsoft-inc	-	Qsoft K-Rate Premium の Manage Templates 機能における任意の PHP コードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2008-7099	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

230013	4.3	警告	qsoft-inc	-	Qsoft K-Rate Premium におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7098	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

230014	7.5	危険	qsoft-inc	-	Qsoft K-Rate Premium における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7097	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

230015	5	警告	unica	-	Unica Affinium Campaign のリスナーサーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-7094	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

230016	6.8	警告	unica	-	Unica Affinium Campaign におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-7093	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

230017	4.3	警告	unica	-	Unica Affinium Campaign におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7092	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

230018	7.5	危険	Pligg	-	Pligg における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7091	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

230019	7.8	危険	Pligg	-	Pligg におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-7090	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

230020	4.3	警告	Pligg	-	Pligg におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7089	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
202121	9.8	CRITICAL Network	couchbase	couchbase_server	Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticat…	CWE-276 Incorrect Default Permissions	CVE-2020-9039	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

202122	8.8	HIGH Network	cacti fedoraproject opmantek opensuse debian	cacti fedora open-audit suse_package_hub debian_linux	graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.	CWE-78 OS Command	CVE-2020-8813	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

202123	8.8	HIGH Adjacent	dlink	dap-2610_firmware	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this …	CWE-287 Improper Authentication	CVE-2020-8862	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

202124	8.8	HIGH Adjacent	dlink	dap-1330_firmware	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploi…	CWE-287 Improper Authentication	CVE-2020-8861	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

202125	8.0	HIGH Adjacent	google	android	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User…	CWE-787 Out-of-bounds Write	CVE-2020-8860	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

202126	6.1	MEDIUM Network	westerndigital	mycloud.com	Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-8960	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

202127	7.8	HIGH Local	trendmicro	vulnerability_protection	Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory.	CWE-427 Uncontrolled Search Path Element	CVE-2020-8601	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

202128	9.8	CRITICAL Network	arista	dcs-7050qx-32s-r_firmware dcs-7050cx3-32s-r_firmware dcs-7280sram-48c6-r_firmware	Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via …	NVD-CWE-noinfo	CVE-2020-9015	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

202129	5.4	MEDIUM Network	machothemes	modula_image_gallery	A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inje…	CWE-79 Cross-site Scripting	CVE-2020-9003	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

202130	9.1	CRITICAL Network	western_digital	my_cloud_home ibi	Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.	CWE-384 Session Fixation	CVE-2020-8990	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed