Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230861 9.3 危険 pierreegougelet - Windows 上で稼動する GFL SDK の Pierre-emmanuel Gougelet XnView などにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0064 2012-12-20 18:34 2008-01-31 Show GitHub Exploit DB Packet Storm
230862 10 危険 トレンドマイクロ - Trend Micro ServerProtect の不特定のプロシージャにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0014 2012-12-20 18:34 2008-11-17 Show GitHub Exploit DB Packet Storm
230863 10 危険 トレンドマイクロ - Trend Micro ServerProtect の不特定のプロシージャにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0013 2012-12-20 18:34 2008-11-17 Show GitHub Exploit DB Packet Storm
230864 10 危険 トレンドマイクロ - Trend Micro ServerProtect の不特定のプロシージャにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0012 2012-12-20 18:34 2008-11-17 Show GitHub Exploit DB Packet Storm
230865 7.2 危険 PulseAudio - PulseAudio の pa_drop_root 関数における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0008 2012-12-20 18:34 2008-01-28 Show GitHub Exploit DB Packet Storm
230866 4.3 警告 xmb forum - XMB におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6728 2012-12-20 18:34 2009-07-5 Show GitHub Exploit DB Packet Storm
230867 10 危険 synce - SynCE (SynCE-dccm) の vdccm におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-6703 2012-12-20 18:34 2008-03-4 Show GitHub Exploit DB Packet Storm
230868 7.5 危険 Simple DirectMedia Layer - SDL_image の IMG_gif.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6697 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230869 2.1 注意 webcalendar - WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6696 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230870 5 警告 VideoLAN - VideoLAN VLC の RTSP モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6684 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209891 9.8 CRITICAL
Network 		kandnconcepts_club_cms_project kandnconcepts_club_cms KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter. CWE-89
SQL Injection 		CVE-2020-23973 2024-11-21 14:14 2020-08-27 Show GitHub Exploit DB Packet Storm
209892 7.5 HIGH
Network 		gmapfp gmapfp In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricte… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-23972 2024-11-21 14:14 2020-08-27 Show GitHub Exploit DB Packet Storm
209893 9.8 CRITICAL
Network 		designmasterevents conference_management DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page. CWE-89
SQL Injection 		CVE-2020-23980 2024-11-21 14:14 2020-08-27 Show GitHub Exploit DB Packet Storm
209894 5.3 MEDIUM
Network 		ericom access_server Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to infor… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-24548 2024-11-21 14:14 2020-08-27 Show GitHub Exploit DB Packet Storm
209895 6.1 MEDIUM
Network 		admin_menu_project admin_menu WP Plugin Rednumber Admin Menu v1.1 and lower does not sanitize the value of the "role" GET parameter before echoing it back out to the user. This results in a reflected XSS vulnerability that attack… CWE-79
Cross-site Scripting 		CVE-2020-24316 2024-11-21 14:14 2020-08-26 Show GitHub Exploit DB Packet Storm
209896 7.5 HIGH
Network 		wordpress_poll_project wordpress_poll Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL stateme… CWE-89
SQL Injection 		CVE-2020-24315 2024-11-21 14:14 2020-08-26 Show GitHub Exploit DB Packet Storm
209897 5.3 MEDIUM
Network 		umanni human_resources Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabli… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-24008 2024-11-21 14:14 2020-08-26 Show GitHub Exploit DB Packet Storm
209898 9.8 CRITICAL
Network 		umanni human_resources Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-24007 2024-11-21 14:14 2020-08-26 Show GitHub Exploit DB Packet Storm
209899 6.1 MEDIUM
Network 		rss_feed_widget_project rss_feed_widget Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerabilit… CWE-79
Cross-site Scripting 		CVE-2020-24314 2024-11-21 14:14 2020-08-26 Show GitHub Exploit DB Packet Storm
209900 6.1 MEDIUM
Network 		etoilewebdesign ultimate_appointment_booking_\&_scheduling Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "Appointment_ID" GET parameter before echoing it back out inside an in… CWE-79
Cross-site Scripting 		CVE-2020-24313 2024-11-21 14:14 2020-08-26 Show GitHub Exploit DB Packet Storm