Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230611 4.3 警告 vBulletin Solutions, Inc. - vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3184 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
230612 9.3 危険 speedbit - DAP の DAP.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3182 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230613 7.5 危険 w2b - W2B phpDatingClub の website.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3179 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230614 7.5 危険 webxell - WebXell Editor の upload_pictures.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3178 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230615 5 警告 ソフォス - Linux および Unix 上で稼動している Sophos ウィルス検出エンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2008-3177 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230616 6.8 警告 regretless - DodosMail の dodosmail.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3163 2012-12-20 18:52 2008-07-14 Show GitHub Exploit DB Packet Storm
230617 7.5 危険 webblizzard - WebBlizzard CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3154 2012-12-20 18:52 2008-07-11 Show GitHub Exploit DB Packet Storm
230618 7.5 危険 tritoncms - Triton CMS Pro における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3153 2012-12-20 18:52 2008-07-11 Show GitHub Exploit DB Packet Storm
230619 7.5 危険 warpspeed
PHPNUKE		 - PHP-Nuke 用の 4ndvddb モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3151 2012-12-20 18:52 2008-07-11 Show GitHub Exploit DB Packet Storm
230620 4.7 警告 wefi - WeFi における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3147 2012-12-20 18:52 2008-07-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209281 6.1 MEDIUM
Network 		os4ed opensis OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter. CWE-79
Cross-site Scripting 		CVE-2020-27409 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209282 7.5 HIGH
Network 		os4ed opensis OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users. CWE-287
CWE-640
Improper Authentication
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2020-27408 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209283 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts th… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27771 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209284 5.5 MEDIUM
Local 		imagemagick
debian 		imagemagick
debian_linux 		Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered … CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27770 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209285 7.8 HIGH
Local 		imagemagick
debian 		imagemagick
debian_linux 		A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the r… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27766 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209286 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero.… CWE-369
 Divide By Zero 		CVE-2020-27765 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209287 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the ran… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27767 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209288 6.8 MEDIUM
Local 		canonical snapcraft
ubuntu_linux 		In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both pl… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-27348 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm
209289 6.1 MEDIUM
Network 		lxml
redhat
debian
fedoraproject
netapp
oracle 		lxml
enterprise_linux
software_collections
debian_linux
fedora
snapcenter
communications_offline_mediation_controller
zfs_storage_appliance_kit 		A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A r… - CVE-2020-27783 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm
209290 7.5 HIGH
Network 		freedesktop
redhat
debian 		poppler
enterprise_linux
debian_linux 		A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' … CWE-824
 Access of Uninitialized Pointer 		CVE-2020-27778 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm