Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246251 5 警告 BitDefender
Linux		 - Bitdefender のスキャンエンジンにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-6661 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246252 4.3 警告 comscripts - GEDCOM_TO_MYSQL におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6655 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246253 4.3 警告 coronamatrix - CoronaMatrix phpAddressBook の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6646 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246254 7.5 危険 dotcontent - DotContent FluentCMS の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6642 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246255 6.5 警告 ASP indir - Shader TV (Beta) における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6641 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246256 7.5 危険 ASP indir - BatmanPorTaL における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6640 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246257 6.8 警告 Pydio - AjaXplorer の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6639 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246258 6.8 警告 geody - Geody Labs Dagger - The Cutting Edge における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6636 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246259 6.8 警告 geody - Geody Labs Dagger - The Cutting Edge における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6635 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246260 9 危険 アバイア - Avaya SES の Web 管理インターフェースにおける任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-6709 2012-06-26 16:10 2008-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218761 9.8 CRITICAL
Network 		wavlink wn530h4_firmware A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary machine instructions as root without … CWE-120
Classic Buffer Overflow 		CVE-2020-12125 2024-11-21 13:59 2020-10-2 Show GitHub Exploit DB Packet Storm
218762 9.8 CRITICAL
Network 		wavlink wn530h4_firmware A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without au… CWE-78
OS Command  		CVE-2020-12124 2024-11-21 13:59 2020-10-2 Show GitHub Exploit DB Packet Storm
218763 8.1 HIGH
Network 		wavlink wn530h4_firmware CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not contain CSRF tokens. If… CWE-352
 Origin Validation Error 		CVE-2020-12123 2024-11-21 13:59 2020-10-2 Show GitHub Exploit DB Packet Storm
218764 7.5 HIGH
Network 		apache
gradle
fedoraproject
oracle 		ant
gradle
fedora
flexcube_private_banking
primavera_unifier
banking_platform
api_gateway
enterprise_repository
retail_predictive_application_server
data_integrator
util… 		As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task delete… NVD-CWE-Other
CVE-2020-11979 2024-11-21 13:59 2020-10-2 Show GitHub Exploit DB Packet Storm
218765 9.1 CRITICAL
Network 		wago 750-852_firmware
750-880_firmware
750-881_firmware
750-831_firmware
750-882_firmware
750-885_firmware
750-889_firmware 		Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAG… - CVE-2020-12505 2024-11-21 13:59 2020-10-1 Show GitHub Exploit DB Packet Storm
218766 9.1 CRITICAL
Network 		wago 750-362_firmware
750-363_firmware
750-823_firmware
750-832_firmware
750-862_firmware
750-891_firmware
750-890_firmware 		Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without auth… - CVE-2020-12506 2024-11-21 13:59 2020-10-1 Show GitHub Exploit DB Packet Storm
218767 8.8 HIGH
Network 		gogogate ismartgate_pro_firmware iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.) CWE-352
 Origin Validation Error 		CVE-2020-12282 2024-11-21 13:59 2020-09-25 Show GitHub Exploit DB Packet Storm
218768 6.5 MEDIUM
Network 		gogogate ismartgate_pro_firmware iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php. CWE-352
 Origin Validation Error 		CVE-2020-12281 2024-11-21 13:59 2020-09-25 Show GitHub Exploit DB Packet Storm
218769 6.5 MEDIUM
Network 		gogogate ismartgate_pro_firmware iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php. CWE-352
 Origin Validation Error 		CVE-2020-12280 2024-11-21 13:59 2020-09-25 Show GitHub Exploit DB Packet Storm
218770 7.2 HIGH
Network 		apache syncope In Apache Syncope 2.1.X releases prior to 2.1.7, when the Flowable extension is enabled, an administrator with workflow entitlements can use Shell Service Tasks to perform malicious operations, inclu… NVD-CWE-noinfo
CVE-2020-11977 2024-11-21 13:59 2020-09-16 Show GitHub Exploit DB Packet Storm