Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230391	7.5	危険	runcms	-	RunCMS の Newbb Plus モジュールにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-3354	2012-12-20 18:52	2008-07-28	Show	GitHub Exploit DB Packet Storm

230392	4.3	警告	puresw	-	Pure Software Lore におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3353	2012-12-20 18:52	2008-07-28	Show	GitHub Exploit DB Packet Storm

230393	5	警告	thekelleys	-	dnsmasq におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2008-3350	2012-12-20 18:52	2008-07-28	Show	GitHub Exploit DB Packet Storm

230394	10	危険	TIBCO Software	-	TIBCO Hawk AMI C library および Hawk HMA におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3338	2012-12-20 18:52	2008-08-13	Show	GitHub Exploit DB Packet Storm

230395	6.4	警告	PowerDNS	-	PowerDNS Authoritative Server における DNS を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2008-3337	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

230396	4.3	警告	PunBB	-	PunBB におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3336	2012-12-20 18:52	2008-07-14	Show	GitHub Exploit DB Packet Storm

230397	10	危険	PunBB	-	PunBB における任意の SMTP コマンドを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2008-3335	2012-12-20 18:52	2008-07-14	Show	GitHub Exploit DB Packet Storm

230398	9.3	危険	Twibright Labs	-	Links における脆弱性	CWE-59 リンク解釈の問題	CVE-2008-3329	2012-12-20 18:52	2008-07-27	Show	GitHub Exploit DB Packet Storm

230399	7.6	危険	レッドハット	-	Cygwin の setup.exe における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-3323	2012-12-20 18:52	2008-07-28	Show	GitHub Exploit DB Packet Storm

230400	5	警告	zdaemon	-	ZDaemon におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3314	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201561	5.4	MEDIUM Network	opensuse	open_build_service	A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly es…	-	CVE-2020-8031	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

201562	6.6	MEDIUM Local	opensuse	openldap2	A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to…	-	CVE-2020-8027	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

201563	4.9	MEDIUM Network	lenovo	xclarity_administrator	An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-8355	2024-11-21 14:38	2021-02-11	Show	GitHub Exploit DB Packet Storm

201564	5.4	MEDIUM Network	nextcloud	nextcloud_server	A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of a stored XSS attack using Internet Explorer when saving a 'javascript:' URL in markdown format.	CWE-79 Cross-site Scripting	CVE-2020-8294	2024-11-21 14:38	2021-02-4	Show	GitHub Exploit DB Packet Storm

201565	8.8	HIGH Adjacent	adt	lifeshield_diy_hd_video_doorbell_firmware	Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of ADT LifeShield DIY HD Video Doorbell allows an attacker on the same network to e…	CWE-77 Command Injection	CVE-2020-8101	2024-11-21 14:38	2021-02-2	Show	GitHub Exploit DB Packet Storm

201566	7.5	HIGH Network	nextcloud	nextcloud_server	A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8295	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

201567	6.5	MEDIUM Network	nextcloud	nextcloud_server	A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage wi…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8293	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

201568	5.4	MEDIUM Network	rocket.chat	rocket.chat	Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.	CWE-79 Cross-site Scripting	CVE-2020-8292	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

201569	5.4	MEDIUM Network	rocket.chat	rocket.chat	The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter.	CWE-79 Cross-site Scripting	CVE-2020-8288	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

201570	6.5	MEDIUM Network	nodejs debian fedoraproject oracle siemens	node.js debian_linux fedora graalvm sinec_infrastructure_network_services	Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies th…	CWE-444 HTTP Request Smuggling	CVE-2020-8287	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed