Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231221 5 警告 webwiz - Web Wiz NewsPad の RTE_file_browser.asp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0479 2012-12-20 18:34 2008-01-29 Show GitHub Exploit DB Packet Storm
231222 6.8 警告 setcms - SetCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0478 2012-12-20 18:34 2008-01-29 Show GitHub Exploit DB Packet Storm
231223 6.4 警告 webwiz - Web Wiz Rich Text Editor の RTE_popup_save_file.asp における .html ファイルなどをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0473 2012-12-20 18:34 2008-01-29 Show GitHub Exploit DB Packet Storm
231224 4.3 警告 woltlab - wBB の modcp.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-0472 2012-12-20 18:34 2008-01-29 Show GitHub Exploit DB Packet Storm
231225 4.3 警告 phpBB - phpBB の privmsg.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-0471 2012-12-20 18:34 2008-01-29 Show GitHub Exploit DB Packet Storm
231226 7.5 危険 tiger php news system - TPNS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0469 2012-12-20 18:34 2008-01-29 Show GitHub Exploit DB Packet Storm
231227 5 警告 webwiz - Web Wiz Rich Text Edito などで使用されている Web Wiz RTE_file_browser.asp におけるディレクトリトラバーサルの脆弱性 CWE-287
不適切な認証 		CVE-2008-0466 2012-12-20 18:34 2008-01-28 Show GitHub Exploit DB Packet Storm
231228 5 警告 seagullproject.org - Seagull の optimizer.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0465 2012-12-20 18:34 2008-01-25 Show GitHub Exploit DB Packet Storm
231229 6.8 警告 slaed - SLAED CMS の function/sources.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0458 2012-12-20 18:34 2008-01-25 Show GitHub Exploit DB Packet Storm
231230 10 危険 シマンテック - Symantec Backup Exec System Recovery Manager で使用される Symantec LiveState Apache Tomcat サーバで稼動している FileUpload クラスにおける任意の JSP ファイルをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0457 2012-12-20 18:34 2008-02-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210091 5.9 MEDIUM
Network 		agora video_software_development_kit Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cle… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-25605 2024-11-21 14:18 2021-02-18 Show GitHub Exploit DB Packet Storm
210092 7.5 HIGH
Network 		oclean oclean Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcode… CWE-798
CWE-327
 Use of Hard-coded Credentials
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-25493 2024-11-21 14:18 2021-02-12 Show GitHub Exploit DB Packet Storm
210093 7.5 HIGH
Network 		realtek rtl8195a_firmware The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() op… CWE-787
 Out-of-bounds Write 		CVE-2020-25857 2024-11-21 14:18 2021-02-4 Show GitHub Exploit DB Packet Storm
210094 8.1 HIGH
Network 		realtek rtl8195a_firmware The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operati… CWE-787
 Out-of-bounds Write 		CVE-2020-25856 2024-11-21 14:18 2021-02-4 Show GitHub Exploit DB Packet Storm
210095 8.1 HIGH
Network 		realtek rtl8195a_firmware The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for a memcpy() operation, resul… CWE-787
 Out-of-bounds Write 		CVE-2020-25855 2024-11-21 14:18 2021-02-4 Show GitHub Exploit DB Packet Storm
210096 8.1 HIGH
Network 		realtek rtl8195a_firmware The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an internal function, r… CWE-787
 Out-of-bounds Write 		CVE-2020-25854 2024-11-21 14:18 2021-02-4 Show GitHub Exploit DB Packet Storm
210097 7.5 HIGH
Network 		realtek rtl8195a_firmware The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an internal function, _rt_md5… CWE-125
Out-of-bounds Read 		CVE-2020-25853 2024-11-21 14:18 2021-02-4 Show GitHub Exploit DB Packet Storm
210098 9.8 CRITICAL
Network 		dlink dns-320_firmware D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution. CWE-78
OS Command  		CVE-2020-25506 2024-11-21 14:18 2021-02-2 Show GitHub Exploit DB Packet Storm
210099 5.3 MEDIUM
Network 		hashicorp vault HashiCorp Vault and Vault Enterprise allowed for enumeration of Secrets Engine mount paths via unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7. NVD-CWE-noinfo
CVE-2020-25594 2024-11-21 14:18 2021-02-2 Show GitHub Exploit DB Packet Storm
210100 9.8 CRITICAL
Network 		accfly 720p_firmware An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CFt… CWE-787
 Out-of-bounds Write 		CVE-2020-25785 2024-11-21 14:18 2021-01-28 Show GitHub Exploit DB Packet Storm