Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230231	7.5	危険	the net guys	-	ASPired2Protect の login.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0487	2012-12-20 18:34	2008-01-30	Show	GitHub Exploit DB Packet Storm

230232	5	警告	webwiz	-	Web Wiz Rich Text Editor の RTE_file_browser.asp におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0481	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

230233	5	警告	webwiz	-	Web Wiz Forums におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0480	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

230234	5	警告	webwiz	-	Web Wiz NewsPad の RTE_file_browser.asp におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0479	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

230235	6.8	警告	setcms	-	SetCMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0478	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

230236	6.4	警告	webwiz	-	Web Wiz Rich Text Editor の RTE_popup_save_file.asp における .html ファイルなどをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-0473	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

230237	4.3	警告	woltlab	-	wBB の modcp.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-0472	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

230238	4.3	警告	phpBB	-	phpBB の privmsg.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-0471	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

230239	7.5	危険	tiger php news system	-	TPNS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0469	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

230240	5	警告	webwiz	-	Web Wiz Rich Text Edito などで使用されている Web Wiz RTE_file_browser.asp におけるディレクトリトラバーサルの脆弱性	CWE-287 不適切な認証	CVE-2008-0466	2012-12-20 18:34	2008-01-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209911	7.8	HIGH Local	artifex	mupdf	A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static…	CWE-416 Use After Free	CVE-2020-16600	2024-11-21 14:07	2020-12-10	Show	GitHub Exploit DB Packet Storm

209912	5.5	MEDIUM Local	gnu netapp	binutils cloud_backup ontap_select_deploy_administration_utility solidfire hci_management_node	A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated i…	CWE-476 NULL Pointer Dereference	CVE-2020-16599	2024-11-21 14:07	2020-12-10	Show	GitHub Exploit DB Packet Storm

209913	5.5	MEDIUM Local	gnu netapp	binutils cloud_backup ontap_select_deploy_administration_utility solidfire_\&_hci_management_node	A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, …	CWE-476 NULL Pointer Dereference	CVE-2020-16593	2024-11-21 14:07	2020-12-10	Show	GitHub Exploit DB Packet Storm

209914	5.5	MEDIUM Local	gnu netapp fedoraproject	binutils ontap_select_deploy_administration_utility fedora	A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a cra…	CWE-416 Use After Free	CVE-2020-16592	2024-11-21 14:07	2020-12-10	Show	GitHub Exploit DB Packet Storm

209915	5.5	MEDIUM Local	gnu netapp	binutils ontap_select_deploy_administration_utility	A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.	CWE-125 Out-of-bounds Read	CVE-2020-16591	2024-11-21 14:07	2020-12-10	Show	GitHub Exploit DB Packet Storm

209916	5.5	MEDIUM Local	gnu netapp	binutils ontap_select_deploy_administration_utility	A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.	CWE-415 Double Free	CVE-2020-16590	2024-11-21 14:07	2020-12-10	Show	GitHub Exploit DB Packet Storm

209917	5.5	MEDIUM Local	openexr debian	openexr debian_linux	A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file.	CWE-787 Out-of-bounds Write	CVE-2020-16589	2024-11-21 14:07	2020-12-10	Show	GitHub Exploit DB Packet Storm

209918	5.5	MEDIUM Local	openexr debian	openexr debian_linux	A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.	CWE-476 NULL Pointer Dereference	CVE-2020-16588	2024-11-21 14:07	2020-12-10	Show	GitHub Exploit DB Packet Storm

209919	5.5	MEDIUM Local	openexr debian	openexr debian_linux	A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a craft…	CWE-787 Out-of-bounds Write	CVE-2020-16587	2024-11-21 14:07	2020-12-10	Show	GitHub Exploit DB Packet Storm

209920	7.5	HIGH Network	mitsubishielectric	r00cpu_firmware r01cpu_firmware r02cpu_firmware r04cpu_firmware r08cpu_firmware r16cpu_firmware r32cpu_firmware r120cpu_firmware r08sfcpu_firmware r16sfcpu_firmware r32s…	Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack expose…	CWE-20 CWE-400 Improper Input Validation Uncontrolled Resource Consumption	CVE-2020-16850	2024-11-21 14:07	2020-12-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed