Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230911	7.5	危険	WordPress.org	-	WordPress のクッキー認証メソッドにおけるクッキーを偽造される脆弱性	CWE-287 不適切な認証	CVE-2008-1930	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

230912	3.5	注意	The phpMyAdmin Project	-	phpMyAdmin における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2008-1924	2012-12-20 18:52	2008-04-22	Show	GitHub Exploit DB Packet Storm

230913	10	危険	sarg	-	Sarg におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1922	2012-12-20 18:52	2008-05-13	Show	GitHub Exploit DB Packet Storm

230914	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Apartment Search Script の listtest.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1919	2012-12-20 18:52	2008-04-23	Show	GitHub Exploit DB Packet Storm

230915	6	警告	PHP-Fusion	-	PHP-Fusion の submit.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1918	2012-12-20 18:52	2008-04-23	Show	GitHub Exploit DB Packet Storm

230916	7.5	危険	w2b	-	W2B Online Banking の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1893	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230917	5	警告	Ruby-lang.org	-	Ruby の WEBrick におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1891	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230918	7.5	危険	xplodphp	-	XplodPHP AutoTutorials の viewcat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1889	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230919	5	警告	wikepage	-	Wikepage Opus の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1884	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230920	6.8	警告	VideoLAN	-	VLC の ParseSSA 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1881	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209761	9.8	CRITICAL Network	gnuplot_project	gnuplot	gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().	CWE-120 Classic Buffer Overflow	CVE-2020-25969	2024-11-21 14:19	2023-07-6	Show	GitHub Exploit DB Packet Storm

209762	7.5	HIGH Network	is.js_project	is.js	is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy…	CWE-1333 Inefficient Regular Expression Complexity	CVE-2020-26302	2024-11-21 14:19	2022-12-23	Show	GitHub Exploit DB Packet Storm

209763	7.5	HIGH Network	dell oracle	bsafe_micro-edition-suite http_server security_service database weblogic_server_proxy_plug-in	Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.	CWE-125 Out-of-bounds Read	CVE-2020-26185	2024-11-21 14:19	2022-06-2	Show	GitHub Exploit DB Packet Storm

209764	7.5	HIGH Network	dell oracle	bsafe_micro-edition-suite http_server security_service weblogic_server_proxy_plug-in	Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.	CWE-295 Improper Certificate Validation	CVE-2020-26184	2024-11-21 14:19	2022-06-2	Show	GitHub Exploit DB Packet Storm

209765	7.8	HIGH Local	shopxo	shopxo	The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via uploadi…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-26008	2024-11-21 14:19	2022-03-21	Show	GitHub Exploit DB Packet Storm

209766	7.8	HIGH Local	shopxo	shopxo	An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-26007	2024-11-21 14:19	2022-03-21	Show	GitHub Exploit DB Packet Storm

209767	6.1	MEDIUM Local	jhead_project	jhead	JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhea…	CWE-787 Out-of-bounds Write	CVE-2020-26208	2024-11-21 14:19	2022-02-2	Show	GitHub Exploit DB Packet Storm

209768	10.0	CRITICAL Network	ssh2_project	ssh2	ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a command injection vulnerability. The issue only exists on Windows. This issue may lea…	-	CVE-2020-26301	2024-11-21 14:19	2021-09-21	Show	GitHub Exploit DB Packet Storm

209769	9.8	CRITICAL Network	systeminformation	systeminformation	systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command injection vulnerability. Problem was fix…	CWE-78 OS Command	CVE-2020-26300	2024-11-21 14:19	2021-09-9	Show	GitHub Exploit DB Packet Storm

209770	7.5	HIGH Network	hcc-embedded	nichestack_tcp\/ip	The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service (remote). The component is: DNS response processing in function: dns_upcal…	CWE-125 Out-of-bounds Read	CVE-2020-25927	2024-11-21 14:19	2021-08-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed