Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
246311 5 警告 easy-news - Easy Content Management Publishing におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6493 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
246312 7.5 危険 denis moinel - PHPGKit における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6491 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
246313 7.5 危険 flysforum - FLABER の function/update_xml.php における任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認
CVE-2008-6490 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
246314 7.5 危険 digiappz - Digiappz DigiAffiliate の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6487 2012-06-26 16:10 2009-03-18 Show GitHub Exploit DB Packet Storm
246315 4.3 警告 BlogEngine.NET - BlogEngine.NET の blog/search.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6476 2012-06-26 16:10 2009-03-16 Show GitHub Exploit DB Packet Storm
246316 7.5 危険 drake team - Drake CMS の components/guestbook/guestbook.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6475 2012-06-26 16:10 2009-03-16 Show GitHub Exploit DB Packet Storm
246317 6.8 警告 edikon - Edikon phpShop におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2008-6455 2012-06-26 16:10 2009-03-13 Show GitHub Exploit DB Packet Storm
246318 7.5 危険 6rbscript - 6rbScript の section.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6454 2012-06-26 16:10 2009-03-13 Show GitHub Exploit DB Packet Storm
246319 4.3 警告 6rbscript - 6rbScript の section.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6453 2012-06-26 16:10 2009-03-13 Show GitHub Exploit DB Packet Storm
246320 7.5 危険 geniuscyber - CMS MAXSITE の Guestbook コンポーネントにおける guestbook に任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2008-6446 2012-06-26 16:10 2009-03-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218241 9.8 CRITICAL
Network
tendacn ac6_firmware
ac9_firmware
ac15_firmware
ac18_firmware
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devi… CWE-120
Classic Buffer Overflow
CVE-2020-13390 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm
218242 9.8 CRITICAL
Network
tendacn ac6_firmware
ac9_firmware
ac15_firmware
ac18_firmware
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devi… CWE-120
Classic Buffer Overflow
CVE-2020-13389 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm
218243 8.8 HIGH
Network
monstra monstra Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=filesmanager because, for example, .php filenames are blocked but .php7 filenames a… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-13384 2024-11-21 14:01 2020-05-22 Show GitHub Exploit DB Packet Storm
218244 7.8 HIGH
Local
amd enterprise_driver
radeon_pro_software
radeon_software
ryzen_3_2200ge_firmware
ryzen_3_2200g_firmware
ryzen_5_2400ge_firmware
ryzen_5_2400g_firmware
ryzen_3_3100_firmware
ryzen…
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity. NVD-CWE-Other
CVE-2020-12931 2024-11-21 14:00 2022-11-10 Show GitHub Exploit DB Packet Storm
218245 7.8 HIGH
Local
amd enterprise_driver
radeon_pro_software
radeon_software
radeon_rx_vega_56_firmware
radeon_rx_vega_64_firmware
ryzen_3_2200ge_firmware
ryzen_3_2200g_firmware
ryzen_5_2400ge_firmware…
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity. NVD-CWE-Other
CVE-2020-12930 2024-11-21 14:00 2022-11-10 Show GitHub Exploit DB Packet Storm
218246 7.8 HIGH
Local
verint desktop_and_process_analytics The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair. CWE-281
 Improper Preservation of Permissions
CVE-2020-12744 2024-11-21 14:00 2022-10-20 Show GitHub Exploit DB Packet Storm
218247 9.8 CRITICAL
Network
moica hicos Hicos citizen certificate client-side component does not filter special characters for command parameters in specific web URLs. An unauthenticated remote attacker can exploit this vulnerability to pe… CWE-78
OS Command 
CVE-2020-12775 2024-11-21 14:00 2022-03-1 Show GitHub Exploit DB Packet Storm
218248 5.5 MEDIUM
Local
amd epyc_7763_firmware
epyc_7713p_firmware
epyc_7713_firmware
epyc_7663_firmware
epyc_7643_firmware
epyc_75f3_firmware
epyc_7543p_firmware
epyc_7543_firmware
epyc_7513_firmware
AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging… CWE-200
Information Exposure
CVE-2020-12966 2024-11-21 14:00 2022-02-5 Show GitHub Exploit DB Packet Storm
218249 7.8 HIGH
Local
amd radeon_software
radeon_pro_software
AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable. CWE-427
 Uncontrolled Search Path Element
CVE-2020-12891 2024-11-21 14:00 2022-02-5 Show GitHub Exploit DB Packet Storm
218250 7.5 HIGH
Network
amd ryzen_pro_5650g_firmware
ryzen_pro_5650ge_firmware
ryzen_pro_5750g_firmware
ryzen_pro_5750ge_firmware
ryzen_pro_5350g_firmware
ryzen_pro_5350ge_firmware
ryzen_pro_4750g_firmware
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage. CWE-74
Injection
CVE-2020-12965 2024-11-21 14:00 2022-02-5 Show GitHub Exploit DB Packet Storm