Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230031 7.5 危険 w1n78 - e107 用の Lyrics プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4906 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230032 5 警告 typosphere - Typo におけるパスワードを推測される脆弱性 CWE-310
暗号の問題 		CVE-2008-4905 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230033 6 警告 typosphere - Typo の "ページを管理する" 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4904 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230034 4.3 警告 typosphere - Typo のコメントを残す機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4903 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230035 7.5 危険 scripts frenzy - Article Publisher Pro の contact_author.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4902 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230036 7.5 危険 scripts frenzy - Article Publisher Pro の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4901 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230037 9.3 危険 SAP - SAP GUI の KWEdit ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2008-4830 2012-12-20 18:52 2009-04-16 Show GitHub Exploit DB Packet Storm
230038 7.5 危険 YourFreeWorld.com - YourFreeWorld Classifieds Blaster Script の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4900 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230039 6.8 警告 planetluc - Planetluc RateMe におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4899 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230040 4.3 警告 planetluc - planetluc RateMe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4898 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224621 7.8 HIGH
Local 		lg bridge An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-20781 2024-11-21 13:39 2020-04-29 Show GitHub Exploit DB Packet Storm
224622 6.8 MEDIUM
Physics 		opensc_project opensc OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check. CWE-415
 Double Free 		CVE-2019-20792 2024-11-21 13:39 2020-04-29 Show GitHub Exploit DB Packet Storm
224623 9.8 CRITICAL
Network 		google openthread OpenThread before 2019-12-13 has a stack-based buffer overflow in MeshCoP::Commissioner::GeneratePskc. CWE-787
 Out-of-bounds Write 		CVE-2019-20791 2024-11-21 13:39 2020-04-29 Show GitHub Exploit DB Packet Storm
224624 9.8 CRITICAL
Network 		trusteddomain
pypolicyd-spf_project
fedoraproject 		opendmarc
pypolicyd-spf
fedora 		OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM fi… CWE-290
 Authentication Bypass by Spoofing 		CVE-2019-20790 2024-11-21 13:39 2020-04-27 Show GitHub Exploit DB Packet Storm
224625 4.8 MEDIUM
Network 		croogo croogo Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies. CWE-79
Cross-site Scripting 		CVE-2019-20789 2024-11-21 13:39 2020-04-27 Show GitHub Exploit DB Packet Storm
224626 9.8 CRITICAL
Network 		libvnc_project
canonical
debian
siemens 		libvncserver
ubuntu_linux
debian_linux
simatic_itc1500_firmware
simatic_itc1500_pro_firmware
simatic_itc1900_firmware
simatic_itc1900_pro_firmware
simatic_itc2200_firmware
sim… 		libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690. CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2019-20788 2024-11-21 13:39 2020-04-24 Show GitHub Exploit DB Packet Storm
224627 9.8 CRITICAL
Network 		teeworlds
opensuse 		teeworlds
leap 		Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. CWE-190
 Integer Overflow or Wraparound 		CVE-2019-20787 2024-11-21 13:39 2020-04-23 Show GitHub Exploit DB Packet Storm
224628 9.8 CRITICAL
Network 		pion dtls handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completio… CWE-287
Improper Authentication 		CVE-2019-20786 2024-11-21 13:39 2020-04-20 Show GitHub Exploit DB Packet Storm
224629 6.8 MEDIUM
Physics 		google android An issue was discovered on LG mobile devices with Android OS 8.0 and 8.1 software for the DTAG carrier. RILD in the radio layer uses an uninitialized variable. The LG ID is LVE-SMP-180013 (January 20… CWE-908
 Use of Uninitialized Resource 		CVE-2019-20785 2024-11-21 13:39 2020-04-17 Show GitHub Exploit DB Packet Storm
224630 5.5 MEDIUM
Local 		google android An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 (MTK chipsets) software. Interaction of GPS with 911 emergency calls is mishandled. The LG ID is LVE-SMP-18001… NVD-CWE-noinfo
CVE-2019-20784 2024-11-21 13:39 2020-04-17 Show GitHub Exploit DB Packet Storm