Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230451 7.5 危険 xplodphp - XplodPHP AutoTutorials の viewcat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1889 2012-12-20 18:52 2008-04-18 Show GitHub Exploit DB Packet Storm
230452 5 警告 wikepage - Wikepage Opus の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1884 2012-12-20 18:52 2008-04-18 Show GitHub Exploit DB Packet Storm
230453 6.8 警告 VideoLAN - VLC の ParseSSA 関数 におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1881 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230454 7.5 危険 Xine - xine-lib の src/demuxers/demux_nsf.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1878 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230455 6.8 警告 snarky - VisualPic の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-1876 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230456 7.5 危険 terong - Terong PHP Photo Gallery の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1875 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230457 6.5 警告 xpoze - Xpoze Pro の account/user/mail.html における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1874 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230458 4.3 警告 tru-zone - Nuke ET のプライベートメッセージ機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1873 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230459 6.5 警告 scriptsagent - Scriptsagent.com Links Directory の links.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1871 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230460 7.5 危険 site sift media - Site Sift Listings における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1869 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209481 7.5 HIGH
Network
altran picotcp
picotcp-ng
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in pico_mdns_handle_data_as_answers_generic() in pico_mdns.c does not check whether the number o… CWE-125
Out-of-bounds Read
CVE-2020-24340 2024-11-21 14:14 2020-12-12 Show GitHub Exploit DB Packet Storm
209482 7.5 HIGH
Network
altran picotcp
picotcp-ng
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compre… CWE-125
Out-of-bounds Read
CVE-2020-24339 2024-11-21 14:14 2020-12-12 Show GitHub Exploit DB Packet Storm
209483 9.8 CRITICAL
Network
altran picotcp An issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer o… CWE-787
 Out-of-bounds Write
CVE-2020-24338 2024-11-21 14:14 2020-12-12 Show GitHub Exploit DB Packet Storm
209484 7.5 HIGH
Network
altran picotcp
picotcp-ng
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is possible to cause a Denial-of-Service by … CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-24337 2024-11-21 14:14 2020-12-12 Show GitHub Exploit DB Packet Storm
209485 9.8 CRITICAL
Network
contiki-os
contiki-ng
contiki
contiki-ng
An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is… CWE-120
Classic Buffer Overflow
CVE-2020-24336 2024-11-21 14:14 2020-12-12 Show GitHub Exploit DB Packet Storm
209486 8.2 HIGH
Network
uip_project uip The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DNS packet header corresponds to the respo… CWE-125
Out-of-bounds Read
CVE-2020-24334 2024-11-21 14:14 2020-12-12 Show GitHub Exploit DB Packet Storm
209487 7.0 HIGH
Local
adobe lightroom Adobe Lightroom Classic version 10.0 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current use… - CVE-2020-24447 2024-11-21 14:14 2020-12-11 Show GitHub Exploit DB Packet Storm
209488 7.0 HIGH
Local
adobe prelude Adobe Prelude version 9.0.1 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this iss… CWE-427
 Uncontrolled Search Path Element
CVE-2020-24440 2024-11-21 14:14 2020-12-11 Show GitHub Exploit DB Packet Storm
209489 9.0 CRITICAL
Network
adobe experience_manager_cloud_service
experience_manager
AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts… - CVE-2020-24445 2024-11-21 14:14 2020-12-10 Show GitHub Exploit DB Packet Storm
209490 5.8 MEDIUM
Network
adobe experience_manager_forms_add-on AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2) have a blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerabil… - CVE-2020-24444 2024-11-21 14:14 2020-12-10 Show GitHub Exploit DB Packet Storm