Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230271 7.5 危険 phpwebgallery - PhpWebGallery におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4702 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
230272 9.3 危険 VideoLAN - VideoLAN VLC Media Player の TY demux プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-4686 2012-12-20 18:52 2008-10-18 Show GitHub Exploit DB Packet Storm
230273 4.3 警告 Wireshark - Wireshark の packet-frame におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4684 2012-12-20 18:52 2008-05-16 Show GitHub Exploit DB Packet Storm
230274 5 警告 Wireshark - Wireshark の wtap.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4682 2012-12-20 18:52 2008-10-1 Show GitHub Exploit DB Packet Storm
230275 4.3 警告 Wireshark - Wireshark の Bluetooth RFCOMM 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-399
CVE-2008-4681 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
230276 4.3 警告 Wireshark - Wireshark の USB 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4680 2012-12-20 18:52 2008-10-1 Show GitHub Exploit DB Packet Storm
230277 4.3 警告 Vim - Vim 用の autoload/netrw.vim における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-4677 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
230278 7.5 危険 phpcounter - PHPcounter の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4675 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
230279 10 危険 webbiscuits - WebBiscuits Software Events Calendar の panel/common/theme/default/header_setup.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4673 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
230280 4.3 警告 WordPress.org - WPMU の wp-admin/wp-blogs.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4671 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201741 5.5 MEDIUM
Local 		kubernetes kubernetes In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during p… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-8566 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
201742 5.5 MEDIUM
Local 		kubernetes kubernetes In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. Thi… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-8565 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
201743 5.5 MEDIUM
Local 		kubernetes kubernetes In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secret… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-8564 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
201744 5.5 MEDIUM
Local 		kubernetes kubernetes In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects < v1.19.… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-8563 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
201745 5.3 MEDIUM
Adjacent 		johnsoncontrols c-cure_web
victor_web 		A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own J… CWE-287
Improper Authentication 		CVE-2020-9049 2024-11-21 14:39 2020-11-20 Show GitHub Exploit DB Packet Storm
201746 8.1 HIGH
Network 		amazon aws_encryption_sdk A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Due to the non-committing property of AES-GCM (and other AEAD ciphers suc… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-8897 2024-11-21 14:39 2020-11-16 Show GitHub Exploit DB Packet Storm
201747 7.5 HIGH
Network 		netapp hci
element_os 		Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmis… NVD-CWE-noinfo
CVE-2020-8583 2024-11-21 14:39 2020-11-14 Show GitHub Exploit DB Packet Storm
201748 6.5 MEDIUM
Network 		netapp hci
element_os 		Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information. NVD-CWE-noinfo
CVE-2020-8582 2024-11-21 14:39 2020-11-14 Show GitHub Exploit DB Packet Storm
201749 6.5 MEDIUM
Network 		intel data_center_manager Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access. CWE-20
 Improper Input Validation  		CVE-2020-8669 2024-11-21 14:39 2020-11-13 Show GitHub Exploit DB Packet Storm
201750 5.5 MEDIUM
Local 		intel quartus_prime Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-8767 2024-11-21 14:39 2020-11-13 Show GitHub Exploit DB Packet Storm