Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230291	4.3	警告	slashcode.com	-	Slash におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2553	2012-12-20 18:52	2008-06-5	Show	GitHub Exploit DB Packet Storm

230292	9.3	危険	Skype Technologies S.A.	-	Skype における警告ダイアログを回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2545	2012-12-20 18:52	2008-06-6	Show	GitHub Exploit DB Packet Storm

230293	7.2	危険	サン・マイクロシステムズ	-	Sun Solaris 上の Sun Cluster における任意の削除されたファイルデータが読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2539	2012-12-20 18:52	2008-03-30	Show	GitHub Exploit DB Packet Storm

230294	7.5	危険	YABSoft	-	YABSoft AIH Script の out.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2536	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

230295	7.5	危険	quickupcms	-	Concepts & Solutions QuickUpCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2530	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

230296	4.3	警告	TYPO3 Association	-	TYPO3 用の WT Gallery エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2526	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

230297	4.3	警告	TYPO3 Association	-	TYPO3 用の Event Database エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2525	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

230298	7.5	危険	raknet	-	RakNet の Autopatcher サーバプラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2523	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

230299	6.5	警告	YABSoft	-	YABSoft Mega File Hosting Script の members.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2521	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

230300	2.1	注意	sarab	-	SaraB の sarab.sh スクリプトにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-2517	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223931	8.1	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c.	CWE-125 Out-of-bounds Read	CVE-2019-20915	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223932	9.8	CRITICAL Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entity_handle_data.spec.	CWE-476 NULL Pointer Dereference	CVE-2019-20914	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223933	8.1	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec.	CWE-125 Out-of-bounds Read	CVE-2019-20913	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223934	8.8	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF.	CWE-787 Out-of-bounds Write	CVE-2019-20912	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223935	6.5	MEDIUM Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-20911	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223936	8.1	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011.	CWE-125 Out-of-bounds Read	CVE-2019-20910	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223937	7.5	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec.	CWE-476 NULL Pointer Dereference	CVE-2019-20909	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223938	6.7	MEDIUM Local	linux opensuse canonical	linux_kernel leap ubuntu_linux	An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or s…	NVD-CWE-noinfo	CVE-2019-20908	2024-11-21 13:39	2020-07-16	Show	GitHub Exploit DB Packet Storm

223939	7.5	HIGH Network	python opensuse debian fedoraproject canonical netapp oracle	python leap debian_linux fedora ubuntu_linux active_iq_unified_manager cloud_volumes_ontap_mediator zfs_storage_appliance_kit	In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-20907	2024-11-21 13:39	2020-07-13	Show	GitHub Exploit DB Packet Storm

223940	6.1	MEDIUM Network	atlassian	jira jira_server	The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of perform…	CWE-601 Open Redirect	CVE-2019-20901	2024-11-21 13:39	2020-07-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed