Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230401 7.5 危険 savas place - Sava's GuestBook の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1642 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
230402 6.8 警告 PowerDNS - PowerDNS Recursor における DNS を偽装される脆弱性 CWE-189
数値処理の問題
CVE-2008-1637 2012-12-20 18:52 2008-03-31 Show GitHub Exploit DB Packet Storm
230403 7.5 危険 ravenphpscripts - KISGB の view_private.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1635 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
230404 7.5 危険 whorl ltd - Jshop Server の v2demo/page.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1624 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
230405 5 警告 ウォッチガード・テクノロジー - Watchguard Firebox の PPTP VPN サービスにおける有効なユーザ名をリスト化される脆弱性 CWE-200
情報漏えい
CVE-2008-1618 2012-12-20 18:52 2008-04-7 Show GitHub Exploit DB Packet Storm
230406 4.3 警告 sebastian marsching - suPHP における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-1614 2012-12-20 18:52 2008-03-30 Show GitHub Exploit DB Packet Storm
230407 7.5 危険 reddot - RedDot CMS の ioRD.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1613 2012-12-20 18:52 2008-04-22 Show GitHub Exploit DB Packet Storm
230408 10 危険 tftp-server - Windows 上で稼動している TFTP Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1611 2012-12-20 18:52 2008-04-1 Show GitHub Exploit DB Packet Storm
230409 7.5 危険 tallsoft quick - TallSoft Quick TFTP Server Pro におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1610 2012-12-20 18:52 2008-04-1 Show GitHub Exploit DB Packet Storm
230410 6.8 警告 serby arslanhan - Serbay Arslanhan Bomba Haber の haberoku.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1607 2012-12-20 18:52 2008-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209681 6.1 MEDIUM
Network
apache ambari A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4. CWE-79
Cross-site Scripting
CVE-2020-1936 2024-11-21 14:11 2021-03-2 Show GitHub Exploit DB Packet Storm
209682 2.7 LOW
Network
redhat keycloak
single_sign-on
jboss_fuse
openshift_application_runtimes
A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack. CWE-209
Information Exposure Through an Error Message
CVE-2020-1717 2024-11-21 14:11 2021-02-12 Show GitHub Exploit DB Packet Storm
209683 4.9 MEDIUM
Network
otrs ticket_forms When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x versio… CWE-200
Information Exposure
CVE-2020-1779 2024-11-21 14:11 2021-02-8 Show GitHub Exploit DB Packet Storm
209684 7.8 HIGH
Local
whatsapp whatsapp_business
whatsapp
A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read and write if a user applied specific ima… CWE-787
 Out-of-bounds Write
CVE-2020-1910 2024-11-21 14:11 2021-02-3 Show GitHub Exploit DB Packet Storm
209685 9.8 CRITICAL
Network
facebook hermes A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2 (https://github.com/facebook/hermes/commit/86543ac47e59c522976b5632b8bf9a2a4… CWE-787
 Out-of-bounds Write
CVE-2020-1896 2024-11-21 14:11 2021-02-2 Show GitHub Exploit DB Packet Storm
209686 9.8 CRITICAL
Network
yccms yccms Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function's improper judgment of the request parameters, triggers remote code execution. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-20287 2024-11-21 14:11 2021-02-2 Show GitHub Exploit DB Packet Storm
209687 5.4 MEDIUM
Network
redhat keycloak A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access to… CWE-863
 Incorrect Authorization
CVE-2020-1725 2024-11-21 14:11 2021-01-29 Show GitHub Exploit DB Packet Storm
209688 6.1 MEDIUM
Network
redhat
keycloak_gatekeeper_project
mobile_application_platform
keycloak_gatekeeper
A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arbitrary web pages. Affected versions of Keycloak Gatekeeper (Louketo): 6.0.1, 7.0… CWE-601
Open Redirect
CVE-2020-1723 2024-11-21 14:11 2021-01-29 Show GitHub Exploit DB Packet Storm
209689 9.8 CRITICAL
Network
caret caret A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22. NVD-CWE-noinfo
CVE-2020-20269 2024-11-21 14:11 2021-01-27 Show GitHub Exploit DB Packet Storm
209690 6.5 MEDIUM
Adjacent
huawei cloudengine_12800_firmware
cloudengine_5800_firmware
cloudengine_6800_firmware
cloudengine_7800_firmware
There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could s… CWE-125
Out-of-bounds Read
CVE-2020-1865 2024-11-21 14:11 2021-01-14 Show GitHub Exploit DB Packet Storm