Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230351 7.5 危険 shoppingtree - CP の admin/SA_shipFedExMeter.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0739 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
230352 7.5 危険 shoppingtree - CP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0738 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
230353 7.5 危険 shoppingtree - CP の admin/utilities_ConfigHelp.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0737 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
230354 5 警告 shoppingtree - CP の admin/SA_shipFedExMeter.asp におけるパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0736 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
230355 10 危険 titan - Titan FTP Server の FTP サービスなどにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0725 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230356 5 警告 the everything development company - The Everything Development System の The Everything Development Engine におけるユーザアカウントへアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-0724 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230357 4.3 警告 planetluc - MyNews の mynews.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0723 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230358 4.3 警告 Webmin Project - Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0720 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230359 6.8 警告 シマンテック - Symantec Altiris Notification Server のエージェントにおける権限を取得される脆弱性 CWE-DesignError
CVE-2008-0716 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
230360 5 警告 sflog - sflog! におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0703 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214181 7.5 HIGH
Network 		google android An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. Attackers can bypass Factory Reset Protection (FRP). The LG ID is LVE-SMP-200004 (March 2020). NVD-CWE-noinfo
CVE-2020-11874 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm
214182 9.8 CRITICAL
Network 		google android An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A stack-based buffer overflow in the logging tool could allow an attacker to gain privileges. The LG ID… CWE-787
 Out-of-bounds Write 		CVE-2020-11873 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm
214183 8.8 HIGH
Network 		wpewebkit
webkitgtk
canonical
fedoraproject
opensuse 		wpe_webkit
webkitgtk
ubuntu_linux
fedora
leap 		A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memo… CWE-416
 Use After Free 		CVE-2020-11793 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm
214184 7.5 HIGH
Network 		bluetrace opentrace The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests before an AES-256-GCM key rotation occurs. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-11872 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm
214185 7.5 HIGH
Network 		ntp
redhat
netapp
debian
opensuse 		ntp
enterprise_linux
clustered_data_ontap
virtual_storage_console
data_ontap
vasa_provider_for_clustered_data_ontap
solidfire
hci_management_node
hci_storage_node_firmware
… 		ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissi… CWE-346
 Origin Validation Error 		CVE-2020-11868 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm
214186 7.5 HIGH
Network 		appinghouse memono Users can lock their notes with a password in Memono version 3.8. Thus, users needs to know a password to read notes. However, these notes are stored in a database without encryption and an attacker … CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-11826 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm
214187 8.8 HIGH
Network 		dolibarr dolibarr_erp\/crm In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be va… CWE-352
 Origin Validation Error 		CVE-2020-11825 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm
214188 5.4 MEDIUM
Network 		dolibarr dolibarr_erp\/crm In Dolibarr 10.0.6, if USER_LOGIN_FAILED is active, there is a stored XSS vulnerability on the admin tools --> audit page. This may lead to stealing of the admin account. CWE-79
Cross-site Scripting 		CVE-2020-11823 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm
214189 9.8 CRITICAL
Network 		rukovoditel rukovoditel Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entities_id parameter. CWE-89
SQL Injection 		CVE-2020-11820 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm
214190 9.8 CRITICAL
Network 		rukovoditel rukovoditel In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve command execution. CWE-22
Path Traversal 		CVE-2020-11819 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm