Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230701 7.5 危険 SoftbizScripts - Softbiz Jokes & Funny Pics Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2874 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
230702 7.5 危険 sharecms - ShareCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2870 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
230703 6.8 警告 webchamado - WebChamado の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2858 2012-12-20 18:52 2008-06-25 Show GitHub Exploit DB Packet Storm
230704 7.5 危険 softdivision - Maxtrade AIO の Trade モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2847 2012-12-20 18:52 2008-06-25 Show GitHub Exploit DB Packet Storm
230705 4.3 警告 traindepot - Traindepot の search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2839 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230706 5 警告 traindepot - Traindepot の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2838 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230707 7.5 危険 sidb - Scientific Image DataBase の projects.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2834 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230708 10 危険 worldlevel - le.cms の admin/upload.php における管理者の認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-2833 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230709 10 危険 tmsnc - tmsnc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2828 2012-12-20 18:52 2008-06-23 Show GitHub Exploit DB Packet Storm
230710 4.3 警告 Xerox - Xerox WorkCentre M123 などの組込み Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2825 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201131 3.5 LOW
Adjacent 		netapp clustered_data_ontap Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the existence of data on other Storage Virtual Mach… NVD-CWE-noinfo
CVE-2020-8588 2024-11-21 14:39 2021-02-4 Show GitHub Exploit DB Packet Storm
201132 7.8 HIGH
Local 		intel bios Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of… CWE-125
Out-of-bounds Read 		CVE-2020-8672 2024-11-21 14:39 2021-02-3 Show GitHub Exploit DB Packet Storm
201133 6.7 MEDIUM
Local 		intel m10jnp2sb_firmware Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access. CWE-20
 Improper Input Validation  		CVE-2020-8734 2024-11-21 14:39 2021-02-3 Show GitHub Exploit DB Packet Storm
201134 5.5 MEDIUM
Local 		netapp oncommand_unified_manager OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink). CWE-59
Link Following 		CVE-2020-8585 2024-11-21 14:39 2021-01-29 Show GitHub Exploit DB Packet Storm
201135 9.1 CRITICAL
Network 		kubernetes java Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a malic… CWE-22
Path Traversal 		CVE-2020-8570 2024-11-21 14:39 2021-01-22 Show GitHub Exploit DB Packet Storm
201136 6.5 MEDIUM
Network 		kubernetes container_storage_interface_snapshotter Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot referenced a non-existing PersistentVolumeClaim a… CWE-476
 NULL Pointer Dereference 		CVE-2020-8569 2024-11-21 14:39 2021-01-22 Show GitHub Exploit DB Packet Storm
201137 6.5 MEDIUM
Network 		kubernetes secrets_store_csi_driver Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem an… CWE-22
Path Traversal 		CVE-2020-8568 2024-11-21 14:39 2021-01-22 Show GitHub Exploit DB Packet Storm
201138 6.5 MEDIUM
Network 		google
hashicorp
microsoft 		secret_manager_provider_for_secret_store_csi_driver
vault_provider_for_secrets_store_csi_driver
azure_key_vault_provider_for_secrets_store_csi_driver 		Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass … CWE-22
Path Traversal 		CVE-2020-8567 2024-11-21 14:39 2021-01-22 Show GitHub Exploit DB Packet Storm
201139 5.0 MEDIUM
Network 		kubernetes
oracle 		kubernetes
communications_cloud_native_core_network_slice_selection_function
communications_cloud_native_core_service_communication_proxy
communications_cloud_native_core_policy 		Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacke… NVD-CWE-noinfo
CVE-2020-8554 2024-11-21 14:39 2021-01-22 Show GitHub Exploit DB Packet Storm
201140 6.5 MEDIUM
Network 		netapp clustered_data_ontap Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage … NVD-CWE-noinfo
CVE-2020-8581 2024-11-21 14:39 2021-01-20 Show GitHub Exploit DB Packet Storm