Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230211	5	警告	yektaweb	-	AWT YEKTA の download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2969	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

230212	7.5	危険	yektaweb	-	AWT YEKTA の rating.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2968	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

230213	4.3	警告	yektaweb	-	AWT YEKTA におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2967	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

230214	7.5	危険	researchguide	-	ResearchGuide の guide.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2964	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

230215	2.6	注意	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2960	2012-12-20 18:52	2008-06-23	Show	GitHub Exploit DB Packet Storm

230216	5.8	警告	Edgewall Software	-	Trac の検索スクリプトにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2008-2951	2012-12-20 18:52	2008-07-27	Show	GitHub Exploit DB Packet Storm

230217	7.5	危険	freedesktop.org	-	Poppler の libpoppler における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-2950	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

230218	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Access Manager および Sun Java System Identity Server における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2945	2012-12-20 18:52	2008-06-26	Show	GitHub Exploit DB Packet Storm

230219	4.9	警告	レッドハット	-	RHEL などの Linux kernel の utrace サポートにおけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2008-2944	2012-12-20 18:52	2008-06-2	Show	GitHub Exploit DB Packet Storm

230220	7.5	危険	レッドハット	-	Red Hat adminutil におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-2932	2012-12-20 18:52	2008-09-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208961	5.5	MEDIUM Local	trendmicro	apex_one	An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installation…	CWE-125 Out-of-bounds Read	CVE-2020-25771	2024-11-21 14:18	2020-09-29	Show	GitHub Exploit DB Packet Storm

208962	5.5	MEDIUM Local	trendmicro	apex_one	An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installation…	CWE-125 Out-of-bounds Read	CVE-2020-25770	2024-11-21 14:18	2020-09-29	Show	GitHub Exploit DB Packet Storm

208963	7.5	HIGH Network	mediawiki fedoraproject	mediawiki fedora	An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. Handling of actor ID does not necessarily use the correct database or correct wiki.	CWE-863 Incorrect Authorization	CVE-2020-25869	2024-11-21 14:18	2020-09-28	Show	GitHub Exploit DB Packet Storm

208964	7.5	HIGH Network	mediawiki fedoraproject	mediawiki fedora	An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster (such as via CentralAuth), rate limit…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-25827	2024-11-21 14:18	2020-09-28	Show	GitHub Exploit DB Packet Storm

208965	6.1	MEDIUM Network	mediawiki fedoraproject	mediawiki fedora	An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. The non-jqueryMsg version of mw.message().parse() doesn't escape HTML. This affects both message contents …	CWE-79 Cross-site Scripting	CVE-2020-25828	2024-11-21 14:18	2020-09-28	Show	GitHub Exploit DB Packet Storm

208966	6.1	MEDIUM Network	mediawiki fedoraproject	mediawiki fedora	An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The rele…	CWE-79 Cross-site Scripting	CVE-2020-25815	2024-11-21 14:18	2020-09-28	Show	GitHub Exploit DB Packet Storm

208967	6.1	MEDIUM Network	mediawiki fedoraproject	mediawiki fedora	In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The attacker creates a message with [javascript:payload xss] and turns it into a jQuery object wi…	CWE-79 Cross-site Scripting	CVE-2020-25814	2024-11-21 14:18	2020-09-28	Show	GitHub Exploit DB Packet Storm

208968	5.3	MEDIUM Network	mediawiki fedoraproject	mediawiki fedora	In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden users.	NVD-CWE-noinfo	CVE-2020-25813	2024-11-21 14:18	2020-09-28	Show	GitHub Exploit DB Packet Storm

208969	6.1	MEDIUM Network	mediawiki fedoraproject	mediawiki fedora	An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a…	CWE-79 Cross-site Scripting	CVE-2020-25812	2024-11-21 14:18	2020-09-28	Show	GitHub Exploit DB Packet Storm

208970	5.3	MEDIUM Local	qemu debian	qemu debian_linux	hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-25625	2024-11-21 14:18	2020-09-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed