Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230331 7.5 危険 PHPNUKE - PHP-Nuke 用の Web_Links モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0879 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
230332 7.5 危険 runcms - RunCMS 用の MyAnnonces モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0878 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
230333 4.3 警告 SmarterTools Inc. - SmarterTools SmarterMail Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0872 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
230334 7.5 危険 woltlab - WoltLab Burning Board の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0857 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230335 7.5 危険 WordPress.org - WordPress 用の Dean Logan WP-People プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0845 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230336 6.4 警告 statcountex - StatCounteX における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0843 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230337 4.4 警告 publicwarehouse - Public Warehouse LightBlog の view_member.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0840 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230338 4.3 警告 ソフォス - Sophos ES1000 および ES4000 Email Security Appliance の Web の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0838 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230339 7.5 危険 simple cms - Simple CMS の indexen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0835 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230340 7.5 危険 PHPNUKE - PHP-Nuke の Books モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0827 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201091 7.5 HIGH
Network 		rockwellautomation micrologix_1100_b_firmware An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series… NVD-CWE-noinfo
CVE-2020-6111 2024-11-21 14:35 2020-12-3 Show GitHub Exploit DB Packet Storm
201092 3.5 LOW
Adjacent 		sap adaptive_server_enterprise In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can access sensitive information which appears in the installation log files. This inf… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-6317 2024-11-21 14:35 2020-12-1 Show GitHub Exploit DB Packet Storm
201093 4.3 MEDIUM
Network 		opera opera_touch Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. T… NVD-CWE-Other
CVE-2020-6157 2024-11-21 14:35 2020-11-14 Show GitHub Exploit DB Packet Storm
201094 7.8 HIGH
Local 		pixar openusd A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provi… CWE-787
 Out-of-bounds Write 		CVE-2020-6156 2024-11-21 14:35 2020-11-14 Show GitHub Exploit DB Packet Storm
201095 7.8 HIGH
Local 		pixar openusd A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which ca… CWE-787
 Out-of-bounds Write 		CVE-2020-6155 2024-11-21 14:35 2020-11-14 Show GitHub Exploit DB Packet Storm
201096 7.8 HIGH
Local 		pixar openusd A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow. CWE-787
 Out-of-bounds Write 		CVE-2020-6150 2024-11-21 14:35 2020-11-14 Show GitHub Exploit DB Packet Storm
201097 7.8 HIGH
Local 		pixar openusd A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provi… CWE-787
 Out-of-bounds Write 		CVE-2020-6149 2024-11-21 14:35 2020-11-14 Show GitHub Exploit DB Packet Storm
201098 7.8 HIGH
Local 		pixar openusd A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. An instance exists in USDC file format FIELDSETS section decompression he… CWE-787
 Out-of-bounds Write 		CVE-2020-6148 2024-11-21 14:35 2020-11-14 Show GitHub Exploit DB Packet Storm
201099 7.8 HIGH
Local 		pixar
apple 		openusd
iphone_os
ipados 		A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression… CWE-787
 Out-of-bounds Write 		CVE-2020-6147 2024-11-21 14:35 2020-11-14 Show GitHub Exploit DB Packet Storm
201100 4.3 MEDIUM
Network 		sap s\/4hana
erp 		SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check. CWE-862
 Missing Authorization 		CVE-2020-6316 2024-11-21 14:35 2020-11-11 Show GitHub Exploit DB Packet Storm