Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230451	7.5	危険	xplodphp	-	XplodPHP AutoTutorials の viewcat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1889	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230452	5	警告	wikepage	-	Wikepage Opus の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1884	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230453	6.8	警告	VideoLAN	-	VLC の ParseSSA 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1881	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230454	7.5	危険	Xine	-	xine-lib の src/demuxers/demux_nsf.c におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1878	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230455	6.8	警告	snarky	-	VisualPic の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1876	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230456	7.5	危険	terong	-	Terong PHP Photo Gallery の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1875	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230457	6.5	警告	xpoze	-	Xpoze Pro の account/user/mail.html における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1874	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230458	4.3	警告	tru-zone	-	Nuke ET のプライベートメッセージ機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1873	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230459	6.5	警告	scriptsagent	-	Scriptsagent.com Links Directory の links.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1871	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230460	7.5	危険	site sift media	-	Site Sift Listings における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1869	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209581	7.8	HIGH Local	artifex	mujs	Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c.	CWE-416 Use After Free	CVE-2020-24343	2024-11-21 14:14	2020-08-14	Show	GitHub Exploit DB Packet Storm

209582	7.8	HIGH Local	lua fedoraproject	lua fedora	Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-24342	2024-11-21 14:14	2020-08-14	Show	GitHub Exploit DB Packet Storm

209583	5.5	MEDIUM Local	trustedcomputinggroup fedoraproject	trousers fedora	An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks. The tss user can be used to c…	CWE-59 Link Following	CVE-2020-24332	2024-11-21 14:14	2020-08-14	Show	GitHub Exploit DB Packet Storm

209584	7.8	HIGH Local	trousers_project fedoraproject	trousers fedora	An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various…	CWE-269 Improper Privilege Management	CVE-2020-24331	2024-11-21 14:14	2020-08-14	Show	GitHub Exploit DB Packet Storm

209585	7.8	HIGH Local	trousers_project fedoraproject	trousers fedora	An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.	CWE-269 Improper Privilege Management	CVE-2020-24330	2024-11-21 14:14	2020-08-14	Show	GitHub Exploit DB Packet Storm

209586	7.8	HIGH Local	flac_project	flac	Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.	CWE-120 Classic Buffer Overflow	CVE-2020-22219	2024-11-21 14:13	2023-08-23	Show	GitHub Exploit DB Packet Storm

209587	8.8	HIGH Network	evertz	3080ipx_firmware 7801fc_firmware 7890ixg_firmware	EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker to upload a webshell or overwrite any c…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-22159	2024-11-21 14:13	2023-07-19	Show	GitHub Exploit DB Packet Storm

209588	8.8	HIGH Network	verydows	verydows	Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code via a crafted script.	CWE-352 Origin Validation Error	CVE-2020-23363	2024-11-21 14:13	2023-05-10	Show	GitHub Exploit DB Packet Storm

209589	9.8	CRITICAL Network	ruckuswireless	r310_firmware r500_firmware r600_firmware t300_firmware t301n_firmware t301s_firmware scg200_firmware sz-100_firmware sz-300_firmware vsz_firmware zonedirector_1100_firm…	In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before …	NVD-CWE-noinfo	CVE-2020-22654	2024-11-21 14:13	2023-01-21	Show	GitHub Exploit DB Packet Storm

209590	6.5	MEDIUM Network	optilinknetwork	op-xt71000n_firmware	A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to create …	CWE-352 Origin Validation Error	CVE-2020-23582	2024-11-21 14:13	2022-11-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed