Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230651 6.4 警告 spyce - Spyce - PSP の spyce/examples/redirect.spy におけるオープンリダイレクトの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0981 2012-12-20 18:34 2008-02-25 Show GitHub Exploit DB Packet Storm
230652 4.3 警告 spyce - Spyce - PSP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0980 2012-12-20 18:34 2008-02-25 Show GitHub Exploit DB Packet Storm
230653 4.3 警告 webgui - Plain Black WebGUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0940 2012-12-20 18:34 2008-02-25 Show GitHub Exploit DB Packet Storm
230654 7.5 危険 WordPress.org - WordPress 用の WPPA プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0939 2012-12-20 18:34 2008-02-25 Show GitHub Exploit DB Packet Storm
230655 7.5 危険 the sword project - The SWORD Project Diatheke の diatheke.pl における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0932 2012-12-20 18:34 2008-02-25 Show GitHub Exploit DB Packet Storm
230656 6.3 警告 xwine - Debian GNU/Linux 上で稼動する XWine の w_export.c における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0931 2012-12-20 18:34 2008-03-3 Show GitHub Exploit DB Packet Storm
230657 7.5 危険 PHPNUKE - PHP-Nuke 用の Manuales モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0922 2012-12-20 18:34 2008-02-22 Show GitHub Exploit DB Packet Storm
230658 4.3 警告 tendenci - Tendenci CMS の search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0793 2012-12-20 18:34 2008-02-14 Show GitHub Exploit DB Packet Storm
230659 4.3 警告 Simple Machines - SMF Shoutbox の sboxDB.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0775 2012-12-20 18:34 2008-02-13 Show GitHub Exploit DB Packet Storm
230660 7.5 危険 site2nite - Site2Nite の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0771 2012-12-20 18:34 2008-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209771 7.7 HIGH
Local 		adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc 		Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a time-of-check time-of-use (TOCTOU) race condition vu… - CVE-2020-24428 2024-11-21 14:14 2020-11-6 Show GitHub Exploit DB Packet Storm
209772 3.3 LOW
Local 		adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc 		Acrobat Reader versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an input validation vulnerability when decoding a crafted codec tha… - CVE-2020-24427 2024-11-21 14:14 2020-11-6 Show GitHub Exploit DB Packet Storm
209773 3.3 LOW
Local 		adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc 		Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosur… - CVE-2020-24426 2024-11-21 14:14 2020-11-6 Show GitHub Exploit DB Packet Storm
209774 5.4 MEDIUM
Network 		nedi nedi NeDi 1.9C allows pwsec.php oid XSS. CWE-79
Cross-site Scripting 		CVE-2020-23989 2024-11-21 14:14 2020-11-3 Show GitHub Exploit DB Packet Storm
209775 5.4 MEDIUM
Network 		nedi nedi NeDi 1.9C allows inc/rt-popup.php d XSS. CWE-79
Cross-site Scripting 		CVE-2020-23868 2024-11-21 14:14 2020-11-3 Show GitHub Exploit DB Packet Storm
209776 6.1 MEDIUM
Network 		grafana grafana Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource. CWE-79
Cross-site Scripting 		CVE-2020-24303 2024-11-21 14:14 2020-10-28 Show GitHub Exploit DB Packet Storm
209777 7.5 HIGH
Network 		victor_cms_project victor_cms A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database. CWE-89
SQL Injection 		CVE-2020-23945 2024-11-21 14:14 2020-10-28 Show GitHub Exploit DB Packet Storm
209778 7.8 HIGH
Local 		iobit malware_fighter An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a malicious DLL file into the WindowsApps folder. NVD-CWE-noinfo
CVE-2020-23864 2024-11-21 14:14 2020-10-27 Show GitHub Exploit DB Packet Storm
209779 8.8 HIGH
Network 		fs s3900_24t4s_firmware An issue was discovered in fs.com S3900 24T4S 1.7.0 and earlier. The form does not have an authentication or token authentication mechanism that allows remote attackers to forge requests on behalf of… CWE-352
 Origin Validation Error 		CVE-2020-24033 2024-11-21 14:14 2020-10-22 Show GitHub Exploit DB Packet Storm
209780 5.5 MEDIUM
Local 		adobe indesign Adobe InDesign version 15.1.2 (and earlier) is affected by a NULL pointer dereference bug that occurs when handling a malformed .indd file. The impact is limited to causing a denial-of-service of the… - CVE-2020-24421 2024-11-21 14:14 2020-10-22 Show GitHub Exploit DB Packet Storm