Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230241 4.3 警告 traindepot - Traindepot の search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2839 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230242 5 警告 traindepot - Traindepot の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2838 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230243 7.5 危険 sidb - Scientific Image DataBase の projects.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2834 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230244 10 危険 worldlevel - le.cms の admin/upload.php における管理者の認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-2833 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230245 10 危険 tmsnc - tmsnc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2828 2012-12-20 18:52 2008-06-23 Show GitHub Exploit DB Packet Storm
230246 4.3 警告 Xerox - Xerox WorkCentre M123 などの組込み Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2825 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
230247 10 危険 Xerox - Xerox WorkCentre 7655 などの Web Services における変更を設定される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2824 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
230248 7.5 危険 phpeasynews - PHPeasyblog の newsarchive.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2823 2012-12-20 18:52 2008-06-23 Show GitHub Exploit DB Packet Storm
230249 4.3 警告 shoutcastadmin - WallCity-Server Shoutcast Admin Panel におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2814 2012-12-20 18:52 2008-06-23 Show GitHub Exploit DB Packet Storm
230250 6.8 警告 shoutcastadmin - WallCity-Server Shoutcast Admin Panel の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2813 2012-12-20 18:52 2008-06-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224091 5.4 MEDIUM
Network 		servicenow it_service_management ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Req… CWE-79
Cross-site Scripting 		CVE-2019-20768 2024-11-21 13:39 2020-05-6 Show GitHub Exploit DB Packet Storm
224092 7.8 HIGH
Local 		lg bridge An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-20781 2024-11-21 13:39 2020-04-29 Show GitHub Exploit DB Packet Storm
224093 6.8 MEDIUM
Physics 		opensc_project opensc OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check. CWE-415
 Double Free 		CVE-2019-20792 2024-11-21 13:39 2020-04-29 Show GitHub Exploit DB Packet Storm
224094 9.8 CRITICAL
Network 		google openthread OpenThread before 2019-12-13 has a stack-based buffer overflow in MeshCoP::Commissioner::GeneratePskc. CWE-787
 Out-of-bounds Write 		CVE-2019-20791 2024-11-21 13:39 2020-04-29 Show GitHub Exploit DB Packet Storm
224095 9.8 CRITICAL
Network 		trusteddomain
pypolicyd-spf_project
fedoraproject 		opendmarc
pypolicyd-spf
fedora 		OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM fi… CWE-290
 Authentication Bypass by Spoofing 		CVE-2019-20790 2024-11-21 13:39 2020-04-27 Show GitHub Exploit DB Packet Storm
224096 4.8 MEDIUM
Network 		croogo croogo Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies. CWE-79
Cross-site Scripting 		CVE-2019-20789 2024-11-21 13:39 2020-04-27 Show GitHub Exploit DB Packet Storm
224097 9.8 CRITICAL
Network 		libvnc_project
canonical
debian
siemens 		libvncserver
ubuntu_linux
debian_linux
simatic_itc1500_firmware
simatic_itc1500_pro_firmware
simatic_itc1900_firmware
simatic_itc1900_pro_firmware
simatic_itc2200_firmware
sim… 		libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690. CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2019-20788 2024-11-21 13:39 2020-04-24 Show GitHub Exploit DB Packet Storm
224098 9.8 CRITICAL
Network 		teeworlds
opensuse 		teeworlds
leap 		Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. CWE-190
 Integer Overflow or Wraparound 		CVE-2019-20787 2024-11-21 13:39 2020-04-23 Show GitHub Exploit DB Packet Storm
224099 9.8 CRITICAL
Network 		pion dtls handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completio… CWE-287
Improper Authentication 		CVE-2019-20786 2024-11-21 13:39 2020-04-20 Show GitHub Exploit DB Packet Storm
224100 6.8 MEDIUM
Physics 		google android An issue was discovered on LG mobile devices with Android OS 8.0 and 8.1 software for the DTAG carrier. RILD in the radio layer uses an uninitialized variable. The LG ID is LVE-SMP-180013 (January 20… CWE-908
 Use of Uninitialized Resource 		CVE-2019-20785 2024-11-21 13:39 2020-04-17 Show GitHub Exploit DB Packet Storm