Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230071 7.5 危険 speedbit - SpeedBit Video Acceleration における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3439 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
230072 7.5 危険 speedbit - SpeedBit DAP における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3433 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
230073 5 警告 Vtiger - Vtiger CRM におけるメールマージテンプレートを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-3458 2012-12-20 18:52 2006-09-9 Show GitHub Exploit DB Packet Storm
230074 7.2 危険 サン・マイクロシステムズ - IOCTL 用の METHOD_NEITHER 通信メソッドで使用されている Sun xVM VirtualBox における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3431 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
230075 6.5 警告 PhpFreeChat - phpFreeChat におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-3428 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230076 6.5 警告 サン・マイクロシステムズ - Sun N1 SPS の Sun Java System Web Server プラグインにおける Web サーバへの管理アクセス権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-3425 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
230077 7.5 危険 willo - Mobius for Mimsy XG における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3420 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230078 7.5 危険 willo - TriO の browse.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3418 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230079 7.5 危険 siteadmin - SiteAdmin の line2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3414 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230080 5 警告 phplinkat - phpLinkat における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-3407 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208911 8.8 HIGH
Network 		openfind mailgates
mailaudit 		MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands from the cgi parameter after attackers obtain the user’s access token. CWE-78
OS Command  		CVE-2020-25849 2024-11-21 14:18 2020-11-2 Show GitHub Exploit DB Packet Storm
208912 7.5 HIGH
Network 		ansible_collections_project community.crypto A flaw was found in Ansible Collection community.crypto. openssl_privatekey_info exposes private key in logs. This directly impacts confidentiality CWE-116
 Improper Encoding or Escaping of Output 		CVE-2020-25646 2024-11-21 14:18 2020-10-30 Show GitHub Exploit DB Packet Storm
208913 7.5 HIGH
Network 		commvault commcell In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal can occur such that an attempt to view a log file can instea… CWE-22
Path Traversal 		CVE-2020-25780 2024-11-21 14:18 2020-10-30 Show GitHub Exploit DB Packet Storm
208914 5.4 MEDIUM
Network 		wso2 enterprise_integrator WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks. CWE-79
Cross-site Scripting 		CVE-2020-25516 2024-11-21 14:18 2020-10-29 Show GitHub Exploit DB Packet Storm
208915 9.8 CRITICAL
Network 		westerndigital my_cloud_firmware Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western Digital My Cloud Devices prior to 5.4.1140. CWE-20
CWE-78
 Improper Input Validation 
OS Command  		CVE-2020-25765 2024-11-21 14:18 2020-10-28 Show GitHub Exploit DB Packet Storm
208916 6.1 MEDIUM
Network 		antsword_project antsword AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code… CWE-79
Cross-site Scripting 		CVE-2020-25470 2024-11-21 14:18 2020-10-26 Show GitHub Exploit DB Packet Storm
208917 9.8 CRITICAL
Network 		ucms_project ucms An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-25483 2024-11-21 14:18 2020-10-24 Show GitHub Exploit DB Packet Storm
208918 9.8 CRITICAL
Network 		crmeb crmeb A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-25466 2024-11-21 14:18 2020-10-24 Show GitHub Exploit DB Packet Storm
208919 6.5 MEDIUM
Network 		bigbluebutton bigbluebutton BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-25820 2024-11-21 14:18 2020-10-21 Show GitHub Exploit DB Packet Storm
208920 7.5 HIGH
Network 		mozilla
redhat
fedoraproject
oracle 		network_security_services
enterprise_linux
fedora
communications_offline_mediation_controller
communications_pricing_design_center
jd_edwards_enterpriseone_tools 		A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-25648 2024-11-21 14:18 2020-10-21 Show GitHub Exploit DB Packet Storm