Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230031 4.3 警告 webSPELL - webSPELL の admin/admincenter.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-0575 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
230032 4.3 警告 webSPELL - webSPELL の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0574 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
230033 7.2 危険 SafeNet, Inc - SafeNET HighAssurance Remote および SoftRemote の IPSecDrv.sys における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0573 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
230034 4.3 警告 uniwin - Uniwin eCart Professional におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0558 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
230035 10 危険 radio toolbox - Steamcast におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2008-0550 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230036 5 警告 radio toolbox - Steamcast の OggHeaderParse 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-0549 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230037 5 警告 radio toolbox - Steamcast におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2008-0548 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230038 4.3 警告 shoppingtree - CP の admin/utilities_ConfigHelp.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0547 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230039 7.5 危険 shoppingtree - CP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0546 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230040 10 危険 Simple DirectMedia Layer - SDL_image の IMG_lbm.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0544 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209701 6.5 MEDIUM
Adjacent 		netgear r6020_firmware
r6080_firmware
r6120_firmware
r6220_firmware
r6230_firmware
r6260_firmware
r6330_firmware
r6350_firmware
r6850_firmware
jnr3210_firmware
wnr2020_firmware 		This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmwa… - CVE-2020-17409 2024-11-21 14:08 2020-10-14 Show GitHub Exploit DB Packet Storm
209702 9.8 CRITICAL
Network 		microhardcorp bullet-lte_firmware This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is not required to exploit this vulnerabil… - CVE-2020-17407 2024-11-21 14:08 2020-10-14 Show GitHub Exploit DB Packet Storm
209703 8.8 HIGH
Network 		microhardcorp bullet-lte_firmware This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is required to exploit this vulnerability.… - CVE-2020-17406 2024-11-21 14:08 2020-10-14 Show GitHub Exploit DB Packet Storm
209704 4.8 MEDIUM
Network 		impresscms impresscms ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution. CWE-79
Cross-site Scripting 		CVE-2020-17551 2024-11-21 14:08 2020-10-8 Show GitHub Exploit DB Packet Storm
209705 9.1 CRITICAL
Network 		get-simple getsimplecms GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php CWE-22
Path Traversal 		CVE-2020-18191 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
209706 9.1 CRITICAL
Network 		bludit bludit Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture. CWE-22
Path Traversal 		CVE-2020-18190 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
209707 9.8 CRITICAL
Network 		pluxml pluxml class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment. CWE-94
Code Injection 		CVE-2020-18185 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
209708 7.2 HIGH
Network 		pluxxml pluxxml In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template. NVD-CWE-noinfo
CVE-2020-18184 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
209709 4.3 MEDIUM
Network 		powerdns authoritative An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialize… CWE-908
 Use of Uninitialized Resource 		CVE-2020-17482 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
209710 7.5 HIGH
Network 		nec expresscluster_x This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1. Authentication is not required to exploit this vulnerability. The spe… - CVE-2020-17408 2024-11-21 14:08 2020-09-11 Show GitHub Exploit DB Packet Storm