Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230591 7.5 危険 raknet - RakNet の Autopatcher サーバプラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2523 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230592 6.5 警告 YABSoft - YABSoft Mega File Hosting Script の members.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2521 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230593 2.1 注意 sarab - SaraB の sarab.sh スクリプトにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2517 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230594 5 警告 シマンテック - Symantec Backup Exec System Recovery Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2512 2012-12-20 18:52 2008-05-28 Show GitHub Exploit DB Packet Storm
230595 7.5 危険 WordPress.org - WordPress 用 Upload File プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2510 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
230596 4.3 警告 tr script news - Tr Script News の news.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2508 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
230597 7.5 危険 simpel side - Simpel Side Weblosning における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2506 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
230598 4.3 警告 simpel side - Simpel Side Weblosning の result.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2505 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
230599 7.5 危険 simpel side - Simpel Side Netbutik における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2504 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
230600 9.3 危険 加藤和良 - eMule X-Ray の Uploadlist におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2503 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209421 7.5 HIGH
Network 		dovecot
debian
fedoraproject 		dovecot
debian_linux
fedora 		Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts. CWE-20
 Improper Input Validation  		CVE-2020-25275 2024-11-21 14:17 2021-01-5 Show GitHub Exploit DB Packet Storm
209422 8.8 HIGH
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a sessio… CWE-384
 Session Fixation 		CVE-2020-25198 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209423 9.8 CRITICAL
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-25196 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209424 8.8 HIGH
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administ… CWE-269
 Improper Privilege Management 		CVE-2020-25194 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209425 5.3 MEDIUM
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization. CWE-200
Information Exposure 		CVE-2020-25192 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209426 9.8 CRITICAL
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-25190 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209427 7.5 HIGH
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords. CWE-521
Weak Password Requirements  		CVE-2020-25153 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209428 9.8 CRITICAL
Network 		treck tcp\/ip A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code. CWE-787
 Out-of-bounds Write 		CVE-2020-25066 2024-11-21 14:17 2020-12-23 Show GitHub Exploit DB Packet Storm
209429 7.8 HIGH
Local 		supremocontrol supremo Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a Trojan horse with the Supremo.exe filename. CWE-269
 Improper Privilege Management 		CVE-2020-25106 2024-11-21 14:17 2020-12-23 Show GitHub Exploit DB Packet Storm
209430 8.8 HIGH
Network 		logrhythm platform_manager LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit what data and services they can interact … NVD-CWE-Other
CVE-2020-25096 2024-11-21 14:17 2020-12-17 Show GitHub Exploit DB Packet Storm