Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245091	9.3	危険	GraphicsMagick	-	GraphicsMagick の ReadPALMImage 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2008-6070	2012-06-26 16:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

245092	6.8	警告	e107.org 123flashchat	-	eChat プラグインの e107chat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6069	2012-06-26 16:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

245093	7.5	危険	DomPHP	-	DomPHP における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6064	2012-06-26 16:10	2009-02-4	Show	GitHub Exploit DB Packet Storm

245094	4.3	警告	ex-designs	-	World Recipe におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6056	2012-06-26 16:10	2009-02-4	Show	GitHub Exploit DB Packet Storm

245095	4.3	警告	adbnewssender	-	ADbNewsSender におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6047	2012-06-26 16:10	2009-02-4	Show	GitHub Exploit DB Packet Storm

245096	7.5	危険	adbnewssender	-	ADbNewsSender における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6046	2012-06-26 16:10	2009-02-4	Show	GitHub Exploit DB Packet Storm

245097	7.5	危険	agaresmedia	-	Arcadem Pro の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6040	2012-06-26 16:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

245098	6.8	警告	bluepage	-	BLUEPAGE CMS における Web セッションハイジャックの脆弱性	CWE-287 不適切な認証	CVE-2008-6039	2012-06-26 16:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

245099	7.5	危険	availscript	-	AvailScript Article Script の view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6037	2012-06-26 16:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

245100	7.5	危険	basebuilder	-	BaseBuilder の main.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6036	2012-06-26 16:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218371	7.5	HIGH Network	json_project fedoraproject opensuse debian apple	json fedora leap debian_linux macos	The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, …	CWE-20 Improper Input Validation	CVE-2020-10663	2024-11-21 13:55	2020-04-29	Show	GitHub Exploit DB Packet Storm

218372	7.5	HIGH Network	inductiveautomation	ignition_gateway	An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk s…	CWE-306 Missing Authentication for Critical Function	CVE-2020-10641	2024-11-21 13:55	2020-04-29	Show	GitHub Exploit DB Packet Storm

218373	7.5	HIGH Network	windriver	vxworks	The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.	CWE-476 NULL Pointer Dereference	CVE-2020-10664	2024-11-21 13:55	2020-04-27	Show	GitHub Exploit DB Packet Storm

218374	8.2	HIGH Network	redhat	openshift_container_platform	A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those l…	-	CVE-2020-10712	2024-11-21 13:55	2020-04-23	Show	GitHub Exploit DB Packet Storm

218375	9.8	CRITICAL Network	sysaid	on-premise	SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to exe…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-10569	2024-11-21 13:55	2020-04-22	Show	GitHub Exploit DB Packet Storm

218376	9.8	CRITICAL Network	mitel	mivoice_connect_client mivoice_connect	A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an a…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-10377	2024-11-21 13:55	2020-04-17	Show	GitHub Exploit DB Packet Storm

218377	7.5	HIGH Network	trianglemicroworks	scada_data_gateway	Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-service condition due to a lack of proper validation of the lengt…	CWE-787 Out-of-bounds Write	CVE-2020-10615	2024-11-21 13:55	2020-04-16	Show	GitHub Exploit DB Packet Storm

218378	7.5	HIGH Network	trianglemicroworks	scada_data_gateway	Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive information due to the lack of proper validation of user-supp…	CWE-125 Out-of-bounds Read	CVE-2020-10613	2024-11-21 13:55	2020-04-16	Show	GitHub Exploit DB Packet Storm

218379	9.8	CRITICAL Network	trianglemicroworks	scada_data_gateway	Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied dat…	CWE-843 Type Confusion	CVE-2020-10611	2024-11-21 13:55	2020-04-16	Show	GitHub Exploit DB Packet Storm

218380	7.8	HIGH Local	eaton	hmisoft_vu3_firmware	Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow …	CWE-120 Classic Buffer Overflow	CVE-2020-10639	2024-11-21 13:55	2020-04-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed