Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230871	7.5	危険	phpeasydata	-	PHPEasyData の annuaire.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2113	2012-12-20 18:52	2008-05-8	Show	GitHub Exploit DB Packet Storm

230872	5	警告	vicftps	-	VicFTPS におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-2031	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

230873	5.8	警告	RSAセキュリティ	-	Web の IIS 用の RSA Authentication Agent におけるオープンリダイレクトの脆弱性	CWE-200 情報漏えい	CVE-2008-2027	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

230874	4.3	警告	RSAセキュリティ	-	RSA Authentication Agent の WebID/IISWebAgentIF.dll におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2026	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

230875	7.5	危険	Simple Machines	-	SMF における CAPTCHA のテストを通過される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2019	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230876	4	警告	phpizabi	-	PHPizabi の template.class.php の AssignUser 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-2018	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230877	9.3	危険	watchfire	-	WatchFire AppScan の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2015	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230878	6.8	警告	pnflashgames	-	PostNuke 用の pnFlashGames モジュールの index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2013	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230879	7.5	危険	postnuke software foundation	-	PostNuke 用の PostSchedule モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2012	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230880	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Directory Proxy Server におけるサーバに対するアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1995	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209741	8.8	HIGH Network	commscope	ruckus_vriot	Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injecting arbitrary commands that will be exe…	CWE-78 OS Command	CVE-2020-26878	2024-11-21 14:20	2020-10-27	Show	GitHub Exploit DB Packet Storm

209742	7.5	HIGH Network	motion_project	motion	A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request.	CWE-125 Out-of-bounds Read	CVE-2020-26566	2024-11-21 14:20	2020-10-27	Show	GitHub Exploit DB Packet Storm

209743	7.8	HIGH Local	kde	partition_manager	An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand helper contains a logic flaw in which the service invoking D-Bus is not properly checked. An attacker …	NVD-CWE-noinfo	CVE-2020-27187	2024-11-21 14:20	2020-10-27	Show	GitHub Exploit DB Packet Storm

209744	7.0	HIGH Local	eclipse netapp oracle apache debian	jetty snap_creator_framework snapcenter vasa_provider virtual_storage_console storage_replication_adapter flexcube_private_banking communications_offline_mediation_controller …	In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between al…	NVD-CWE-Other	CVE-2020-27216	2024-11-21 14:20	2020-10-23	Show	GitHub Exploit DB Packet Storm

209745	8.8	HIGH Network	belkin	linksys_wrt_160nl_firmware	Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow vulnerability because of sprintf in create_dir in mini_httpd. Successful exploitation leads to arbitrary code…	CWE-787 Out-of-bounds Write	CVE-2020-26561	2024-11-21 14:20	2020-10-23	Show	GitHub Exploit DB Packet Storm

209746	7.8	HIGH Local	avm	fritz\!box_7490_firmware	FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.	NVD-CWE-noinfo	CVE-2020-26887	2024-11-21 14:20	2020-10-23	Show	GitHub Exploit DB Packet Storm

209747	9.1	CRITICAL Network	hashicorp	nomad	HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6	NVD-CWE-noinfo	CVE-2020-27195	2024-11-21 14:20	2020-10-23	Show	GitHub Exploit DB Packet Storm

209748	7.5	HIGH Network	octopus	octopus_deploy	An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one.	NVD-CWE-noinfo	CVE-2020-27155	2024-11-21 14:20	2020-10-23	Show	GitHub Exploit DB Packet Storm

209749	5.3	MEDIUM Network	atomx	atomxcms	AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php	CWE-22 CWE-668 Path Traversal Exposure of Resource to Wrong Sphere	CVE-2020-26650	2024-11-21 14:20	2020-10-23	Show	GitHub Exploit DB Packet Storm

209750	8.1	HIGH Network	atomx	atomxcms_2	AtomXCMS 2.0 is affected by Incorrect Access Control via admin/dump.php	CWE-306 CWE-862 Missing Authentication for Critical Function Missing Authorization	CVE-2020-26649	2024-11-21 14:20	2020-10-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed