Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230511 6.8 警告 powergap - Powergap Shopsystem の s03.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3561 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
230512 6.8 警告 wsnlinks - WSN Forum などの index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3555 2012-12-20 18:52 2008-08-8 Show GitHub Exploit DB Packet Storm
230513 10 危険 サン・マイクロシステムズ - Nokia Series 40 3rd エディションデバイスにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3553 2012-12-20 18:52 2008-08-8 Show GitHub Exploit DB Packet Storm
230514 10 危険 サン・マイクロシステムズ - Sun Wireless Toolkit で同梱されている Sun Java Platform Micro Edition における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-3551 2012-12-20 18:52 2008-08-8 Show GitHub Exploit DB Packet Storm
230515 4.9 警告 サン・マイクロシステムズ - Sun Netra T5220 Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-3548 2012-12-20 18:52 2008-08-4 Show GitHub Exploit DB Packet Storm
230516 4.7 警告 レッドハット - Fedora などの Linux 上で稼動している initscripts の rc.sysinit における任意のファイルを削除される脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-3524 2012-12-20 18:52 2008-09-25 Show GitHub Exploit DB Packet Storm
230517 4.3 警告 レッドハット - Red Hat JBoss Enterprise Application Platform の JBossAs コンポーネントにおける重要な情報を取得される脆弱性 CWE-16
環境設定 		CVE-2008-3519 2012-12-20 18:52 2008-09-22 Show GitHub Exploit DB Packet Storm
230518 4.3 警告 softbiz - Softbiz Photo Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3511 2012-12-20 18:52 2008-08-7 Show GitHub Exploit DB Packet Storm
230519 5 警告 wogan may - LiteNews における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3508 2012-12-20 18:52 2008-08-7 Show GitHub Exploit DB Packet Storm
230520 7.5 危険 wogan may - LiteNews の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3507 2012-12-20 18:52 2008-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201641 7.5 HIGH
Network 		zint zint A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in add_on in upcean.c, when called from eanx in upcean.c during EAN barcode generation. CWE-476
 NULL Pointer Dereference 		CVE-2020-9385 2024-11-21 14:40 2020-02-25 Show GitHub Exploit DB Packet Storm
201642 5.4 MEDIUM
Network 		widgets_project widgets An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via Med… CWE-74
Injection 		CVE-2020-9382 2024-11-21 14:40 2020-02-25 Show GitHub Exploit DB Packet Storm
201643 7.5 HIGH
Network 		totaljs total.js_cms controllers/admin.js in Total.js CMS 13 allows remote attackers to execute arbitrary code via a POST to the /admin/api/widgets/ URI. This can be exploited in conjunction with CVE-2019-15954. CWE-863
 Incorrect Authorization 		CVE-2020-9381 2024-11-21 14:40 2020-02-25 Show GitHub Exploit DB Packet Storm
201644 9.8 CRITICAL
Network 		tp-link tl-wr849n_firmware On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's tracerou… CWE-78
OS Command  		CVE-2020-9374 2024-11-21 14:40 2020-02-25 Show GitHub Exploit DB Packet Storm
201645 7.5 HIGH
Network 		sympa
fedoraproject
debian 		sympa
fedora
debian_linux 		Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of notifications to listmasters) via a series of requests with mal… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-9369 2024-11-21 14:40 2020-02-25 Show GitHub Exploit DB Packet Storm
201646 9.8 CRITICAL
Network 		gnu screen A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly hav… CWE-787
 Out-of-bounds Write 		CVE-2020-9366 2024-11-21 14:40 2020-02-25 Show GitHub Exploit DB Packet Storm
201647 7.5 HIGH
Network 		pureftpd
fedoraproject 		pure-ftpd
fedora 		An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c. CWE-125
Out-of-bounds Read 		CVE-2020-9365 2024-11-21 14:40 2020-02-25 Show GitHub Exploit DB Packet Storm
201648 7.8 HIGH
Local 		sophos cloud_optix
mobile
intercept_x_endpoint
intercept_x_for_server
secure_web_gateway
endpoint_protection 		The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Se… CWE-436
 Interpretation Conflict 		CVE-2020-9363 2024-11-21 14:40 2020-02-25 Show GitHub Exploit DB Packet Storm
201649 7.8 HIGH
Local 		quickheal home_security
internet_security
total_security_multi-device
antivirus_pro
antivirus_for_server
total_security 		The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet… CWE-436
 Interpretation Conflict 		CVE-2020-9362 2024-11-21 14:40 2020-02-25 Show GitHub Exploit DB Packet Storm
201650 9.8 CRITICAL
Network 		networkmanager-ssh_project
debian 		networkmanager-ssh
debian_linux 		danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled. NVD-CWE-noinfo
CVE-2020-9355 2024-11-21 14:40 2020-02-23 Show GitHub Exploit DB Packet Storm