Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230441 6.8 警告 シマンテック - Symantec Scan Engine を含む特定の Symantec アンチウイルス製品で使用される Symantec Decomposer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0309 2012-12-20 18:34 2008-02-26 Show GitHub Exploit DB Packet Storm
230442 7.1 危険 シマンテック - Symantec Scan Engine を含む特定の Symantec アンチウイルス製品で使用される Symantec Decomposer におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-0308 2012-12-20 18:34 2008-02-26 Show GitHub Exploit DB Packet Storm
230443 9.3 危険 SAP - SAP MaxDB の vserver における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2008-0307 2012-12-20 18:34 2008-03-11 Show GitHub Exploit DB Packet Storm
230444 6.9 警告 SAP - SAP MaxDB の sdbstarter における任意のコマンドを実行される脆弱性 CWE-DesignError
CVE-2008-0306 2012-12-20 18:34 2008-03-11 Show GitHub Exploit DB Packet Storm
230445 4.3 警告 Python Software Foundation - Paramiko の common.py における重要な情報を取得される脆弱性 CWE-DesignError
CVE-2008-0299 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
230446 10 危険 VideoLAN - Windows 上で稼動する VideoLAN VLC Media Player の libaccess_realrtsp プラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0296 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
230447 8.5 危険 VideoLAN - VideoLAN VLC Media Player で使用される Xine ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0295 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
230448 6.8 警告 visionburst - VisionBurst vcart における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0287 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
230449 4.3 警告 Simple Machines - SMF におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0284 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
230450 7.5 危険 xforum - Xforum の liretopic.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0279 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214171 6.1 MEDIUM
Network 		svg2png_project svg2png svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document. CWE-79
Cross-site Scripting 		CVE-2020-11887 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
214172 8.1 HIGH
Network 		opennms horizon
meridian 		OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Mer… CWE-89
SQL Injection 		CVE-2020-11886 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
214173 7.2 HIGH
Network 		wso2 enterprise_integrator WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such as SSRF via an uploade… CWE-611
CWE-918
XXE
Server-Side Request Forgery (SSRF)  		CVE-2020-11885 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
214174 5.3 MEDIUM
Network 		divante storefront-api
vue-storefront-api 		In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, wit… CWE-209
Information Exposure Through an Error Message 		CVE-2020-11883 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
214175 6.5 MEDIUM
Network 		kde kmail An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or other source of mailto links) can make KMail attach local file… NVD-CWE-Other
CVE-2020-11880 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
214176 6.5 MEDIUM
Network 		gnome evolution An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or other source of mailto links) can make Evolution attach … NVD-CWE-Other
CVE-2020-11879 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
214177 9.8 CRITICAL
Network 		jitsi meet The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default passwords (such as passw0rd) for system accounts. CWE-798
 Use of Hard-coded Credentials 		CVE-2020-11878 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
214178 7.5 HIGH
Network 		zoom meetings airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC encryption. NOTE: the vendor states that this IV is used only within unreachable… CWE-330
 Use of Insufficiently Random Values 		CVE-2020-11877 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
214179 7.5 HIGH
Network 		zoom meetings airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-256 CBC context. NOTE: the vendor states that this initializa… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-11876 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
214180 7.8 HIGH
Local 		google android An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK chipsets) software. The MTK kernel does not properly implement exception handling, allowing an attacker to ga… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-11875 2024-11-21 13:58 2020-04-17 Show GitHub Exploit DB Packet Storm