Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230761 7.5 危険 YABSoft - YABSoft AIH Script の out.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2536 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230762 7.5 危険 quickupcms - Concepts & Solutions QuickUpCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2530 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230763 4.3 警告 TYPO3 Association - TYPO3 用の WT Gallery エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2526 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230764 4.3 警告 TYPO3 Association - TYPO3 用の Event Database エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2525 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230765 7.5 危険 raknet - RakNet の Autopatcher サーバプラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2523 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230766 6.5 警告 YABSoft - YABSoft Mega File Hosting Script の members.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2521 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230767 2.1 注意 sarab - SaraB の sarab.sh スクリプトにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2517 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230768 5 警告 シマンテック - Symantec Backup Exec System Recovery Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2512 2012-12-20 18:52 2008-05-28 Show GitHub Exploit DB Packet Storm
230769 7.5 危険 WordPress.org - WordPress 用 Upload File プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2510 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
230770 4.3 警告 tr script news - Tr Script News の news.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2508 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201141 7.8 HIGH
Local 		apple iphone_os
xcode
ipados 		This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An at… NVD-CWE-noinfo
CVE-2020-9992 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
201142 8.8 HIGH
Network 		apple
fedoraproject 		iphone_os
safari
ipados
icloud
tvos
itunes
watchos
fedora 		An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution. CWE-787
 Out-of-bounds Write 		CVE-2020-9983 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
201143 5.5 MEDIUM
Local 		apple iphone_os
watchos
tvos
ipados 		A logic issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0. A malicious application may be able to leak sensitive user informa… NVD-CWE-noinfo
CVE-2020-9976 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
201144 5.5 MEDIUM
Local 		apple iphone_os
watchos
tvos
ipados
mac_os_x 		A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.0 and iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, watchOS 7.0. A malicious application may be able to access … NVD-CWE-noinfo
CVE-2020-9968 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
201145 5.5 MEDIUM
Local 		apple iphone_os
ipados 		A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory. CWE-665
 Improper Initialization 		CVE-2020-9964 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
201146 2.4 LOW
Physics 		apple iphone_os
ipados 		A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical acc… CWE-667
 Improper Locking 		CVE-2020-9959 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
201147 7.8 HIGH
Local 		apple iphone_os
ipados 		An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.0 and iPadOS 14.0. An application may be able to cause unexpected system termination or write k… CWE-787
 Out-of-bounds Write 		CVE-2020-9958 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
201148 7.1 HIGH
Network 		apple
webkit 		iphone_os
watchos
safari
icloud
tvos
ipados
webkitgtk\+ 		An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windo… CWE-79
Cross-site Scripting 		CVE-2020-9952 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
201149 8.8 HIGH
Network 		apple
webkit
debian 		iphone_os
watchos
safari
tvos
ipados
icloud
itunes
webkitgtk\+
debian_linux 		A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution. CWE-416
 Use After Free 		CVE-2020-9951 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm
201150 8.8 HIGH
Network 		apple
webkit
debian 		safari
webkitgtk\+
debian_linux 		A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution. CWE-843
Type Confusion 		CVE-2020-9948 2024-11-21 14:41 2020-10-17 Show GitHub Exploit DB Packet Storm