Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247291 4.3 警告 compact cms - CompactCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4909 2012-06-26 16:02 2008-11-3 Show GitHub Exploit DB Packet Storm
247292 3.3 注意 crossfire - CrossFire crossfire-maps の maps/Info/combine.pl における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4908 2012-06-26 16:02 2008-11-3 Show GitHub Exploit DB Packet Storm
247293 7.5 危険 1st news - 1st News 4 Professional の products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4890 2012-06-26 16:02 2008-11-3 Show GitHub Exploit DB Packet Storm
247294 7.5 危険 deV!L'z Clanportal - DZCP の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4889 2012-06-26 16:02 2008-11-3 Show GitHub Exploit DB Packet Storm
247295 10 危険 MPlayer project
FFmpeg		 - MPlayer で使用される FFmpeg におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4869 2012-06-26 16:02 2008-10-31 Show GitHub Exploit DB Packet Storm
247296 10 危険 MPlayer project
FFmpeg		 - MPlayer で使用される FFmpeg の avcodec_close 関数における詳細不明の脆弱性 CWE-noinfo
情報不足 		CVE-2008-4868 2012-06-26 16:02 2008-10-31 Show GitHub Exploit DB Packet Storm
247297 10 危険 MPlayer project
FFmpeg		 - MPlayer で使用される FFmpeg の libavcodec/dca.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4867 2012-06-26 16:02 2008-10-31 Show GitHub Exploit DB Packet Storm
247298 10 危険 MPlayer project
FFmpeg		 - MPlayer で使用される FFmpeg の libavformat/utils.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4866 2012-06-26 16:02 2008-10-31 Show GitHub Exploit DB Packet Storm
247299 6.9 警告 blender - Blender の BPY_interface における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2008-4863 2012-06-26 16:02 2008-10-31 Show GitHub Exploit DB Packet Storm
247300 7.5 危険 e107.org - e107 用 EasyShop プラグインの easyshop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4786 2012-06-26 16:02 2008-10-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219551 5.3 MEDIUM
Network 		trusteddomain
fedoraproject 		opendmarc
fedora 		OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsin… CWE-290
 Authentication Bypass by Spoofing 		CVE-2020-12272 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
219552 9.8 CRITICAL
Network 		testlink testlink In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web s… NVD-CWE-noinfo
CVE-2020-12274 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
219553 7.5 HIGH
Network 		testlink testlink In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials. CWE-311
CWE-522
Missing Encryption of Sensitive Data
 Insufficiently Protected Credentials 		CVE-2020-12273 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
219554 6.1 MEDIUM
Network 		grafana grafana Grafana version < 6.7.3 is vulnerable for annotation popup XSS. CWE-79
Cross-site Scripting 		CVE-2020-12052 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
219555 9.8 CRITICAL
Network 		sophos sfos A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with eithe… CWE-89
SQL Injection 		CVE-2020-12271 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
219556 9.8 CRITICAL
Network 		artifex
debian
opensuse 		jbig2dec
debian_linux
leap 		jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow. CWE-787
 Out-of-bounds Write 		CVE-2020-12268 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
219557 9.8 CRITICAL
Network 		qt qt setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. CWE-416
 Use After Free 		CVE-2020-12267 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
219558 9.8 CRITICAL
Network 		decompress_project decompress The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal. CWE-22
CWE-59
Path Traversal
Link Following 		CVE-2020-12265 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
219559 7.8 HIGH
Local 		avira antivirus Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlink. CWE-59
Link Following 		CVE-2020-12254 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
219560 6.5 MEDIUM
Adjacent 		bluezone bluezone React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote attackers to interfere with COVID-19 contact tracing by using many IDs. NOTE: … CWE-330
 Use of Insufficiently Random Values 		CVE-2020-12270 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm