Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230371 7.5 危険 slashcode.com - Slash における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2231 2012-12-20 18:52 2008-06-5 Show GitHub Exploit DB Packet Storm
230372 4.6 警告 reportbug-ng - reportbug および reportbug-ng における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2230 2012-12-20 18:52 2008-06-4 Show GitHub Exploit DB Packet Storm
230373 6.8 警告 PHP-Fusion - PHP-Fusion Forum Rank System におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2227 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
230374 6.8 警告 sazcart - SazCart における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2224 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
230375 7.5 危険 scorpnews - Thomas Gossmann ScorpNews の example.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2193 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
230376 6.8 警告 postnuke software foundation - PostNuke 用の pnEncyclopedia モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2191 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
230377 6.8 警告 romedchim international srl - Online Rent の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2190 2012-12-20 18:52 2008-05-14 Show GitHub Exploit DB Packet Storm
230378 4.3 警告 Toocharger - SMartBlog の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2185 2012-12-20 18:52 2008-05-13 Show GitHub Exploit DB Packet Storm
230379 7.5 危険 Toocharger - SMartBlog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2184 2012-12-20 18:52 2008-05-13 Show GitHub Exploit DB Packet Storm
230380 7.5 危険 Toocharger - SMartBlog の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2183 2012-12-20 18:52 2008-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214391 8.8 HIGH
Network 		trendnet tew-827dru_firmware TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via th… CWE-787
 Out-of-bounds Write 		CVE-2020-14077 2024-11-21 14:02 2020-06-15 Show GitHub Exploit DB Packet Storm
214392 8.8 HIGH
Network 		trendnet tew-827dru_firmware TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect with the key wan_ifname (or wan0_dns), all… CWE-78
OS Command  		CVE-2020-14075 2024-11-21 14:02 2020-06-15 Show GitHub Exploit DB Packet Storm
214393 8.8 HIGH
Network 		trendnet tew-827dru_firmware TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via th… CWE-787
 Out-of-bounds Write 		CVE-2020-14074 2024-11-21 14:02 2020-06-15 Show GitHub Exploit DB Packet Storm
214394 9.8 CRITICAL
Network 		naviwebs navigatecms The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in check_upload in lib/packages/ext… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-14067 2024-11-21 14:02 2020-06-15 Show GitHub Exploit DB Packet Storm
214395 8.1 HIGH
Network 		fasterxml
netapp
oracle 		jackson-databind
steelstore_cloud_integrated_storage
active_iq_unified_manager
agile_plm
banking_digital_experience
communications_diameter_signaling_router
communications_evolved_c… 		FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill). CWE-502
 Deserialization of Untrusted Data 		CVE-2020-14060 2024-11-21 14:02 2020-06-15 Show GitHub Exploit DB Packet Storm
214396 8.1 HIGH
Network 		fasterxml
netapp
debian
oracle 		jackson-databind
steelstore_cloud_integrated_storage
active_iq_unified_manager
debian_linux
agile_plm
banking_digital_experience
communications_diameter_signaling_router
communic… 		FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-14062 2024-11-21 14:02 2020-06-15 Show GitHub Exploit DB Packet Storm
214397 8.1 HIGH
Network 		fasterxml
netapp
debian
oracle 		jackson-databind
steelstore_cloud_integrated_storage
active_iq_unified_manager
debian_linux
agile_plm
banking_digital_experience
communications_instant_messaging_server
communica… 		FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectio… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-14061 2024-11-21 14:02 2020-06-15 Show GitHub Exploit DB Packet Storm
214398 7.8 HIGH
Local 		icinga
opensuse 		icinga
leap
backports_sle 		An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an u… CWE-59
Link Following 		CVE-2020-14004 2024-11-21 14:02 2020-06-13 Show GitHub Exploit DB Packet Storm
214399 7.5 HIGH
Network 		zohocorp manageengine_servicedesk_plus Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents. CWE-306
Missing Authentication for Critical Function 		CVE-2020-14048 2024-11-21 14:02 2020-06-12 Show GitHub Exploit DB Packet Storm
214400 7.2 HIGH
Network 		pandorafms pandora_fms Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-13855 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm