Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230091 7.5 危険 xigla - Absolute Banner Manager .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6858 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230092 7.5 危険 xigla - Absolute Podcast .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6857 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230093 7.5 危険 xigla - Xigla Software Absolute News Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6856 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230094 7.5 危険 xigla - Xigla Software Absolute News Feed における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6855 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230095 7.5 危険 xigla - Xigla Software Absolute FAQ Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6854 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230096 4.3 警告 PHP-Fusion - PHP-Fusion の messages.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6850 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
230097 6.8 警告 w2b - phpGreetCards の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6849 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
230098 4.3 警告 w2b - phpGreetCards の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6848 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
230099 4.3 警告 PreProject.com - Pre ASP Job Board の Employee/emp_login.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6847 2012-12-20 19:10 2009-07-2 Show GitHub Exploit DB Packet Storm
230100 6.8 警告 Pluck CMS - Pluck の data/modules/blog/module_pages_site.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6842 2012-12-20 19:10 2009-07-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202121 7.6 HIGH
Physics 		ncr aptra_xfs NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an atta… CWE-120
Classic Buffer Overflow 		CVE-2020-9063 2024-11-21 14:39 2020-08-22 Show GitHub Exploit DB Packet Storm
202122 5.3 MEDIUM
Physics 		dieboldnixdorf probase Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an att… CWE-306
CWE-311
Missing Authentication for Critical Function
Missing Encryption of Sensitive Data 		CVE-2020-9062 2024-11-21 14:39 2020-08-22 Show GitHub Exploit DB Packet Storm
202123 4.3 MEDIUM
Network 		isc
debian
canonical
netapp
fedoraproject
opensuse 		bind
debian_linux
ubuntu_linux
steelstore_cloud_integrated_storage
fedora
leap 		In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition… CWE-269
 Improper Privilege Management 		CVE-2020-8624 2024-11-21 14:39 2020-08-22 Show GitHub Exploit DB Packet Storm
202124 7.5 HIGH
Network 		isc
fedoraproject
opensuse
debian
canonical
synology
netapp 		bind
fedora
leap
debian_linux
ubuntu_linux
dns_server
steelstore_cloud_integrated_storage 		In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a spec… CWE-617
 Reachable Assertion 		CVE-2020-8623 2024-11-21 14:39 2020-08-22 Show GitHub Exploit DB Packet Storm
202125 7.5 HIGH
Network 		isc
opensuse
canonical
synology
netapp 		bind
leap
ubuntu_linux
dns_server
steelstore_cloud_integrated_storage 		In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition… CWE-617
 Reachable Assertion 		CVE-2020-8621 2024-11-21 14:39 2020-08-22 Show GitHub Exploit DB Packet Storm
202126 7.5 HIGH
Network 		isc
opensuse
netapp
canonical 		bind
leap
steelstore_cloud_integrated_storage
ubuntu_linux 		In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing … CWE-617
 Reachable Assertion 		CVE-2020-8620 2024-11-21 14:39 2020-08-22 Show GitHub Exploit DB Packet Storm
202127 6.5 MEDIUM
Network 		isc
fedoraproject
debian
canonical
netapp
opensuse
synology
oracle 		bind
fedora
debian_linux
ubuntu_linux
steelstore_cloud_integrated_storage
leap
dns_server
communications_diameter_signaling_router 		In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, o… CWE-617
 Reachable Assertion 		CVE-2020-8622 2024-11-21 14:39 2020-08-22 Show GitHub Exploit DB Packet Storm
202128 7.8 HIGH
Local 		foxitsoftware foxit_studio_photo This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the … CWE-125
Out-of-bounds Read 		CVE-2020-8870 2024-11-21 14:39 2020-08-20 Show GitHub Exploit DB Packet Storm
202129 7.8 HIGH
Local 		foxitsoftware foxit_studio_photo This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the … - CVE-2020-8869 2024-11-21 14:39 2020-08-20 Show GitHub Exploit DB Packet Storm
202130 6.5 MEDIUM
Adjacent 		intel inet_wireless_daemon Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated user to potentially enable denial of service via adjacent access. NVD-CWE-noinfo
CVE-2020-8689 2024-11-21 14:39 2020-08-13 Show GitHub Exploit DB Packet Storm