Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248021 9.3 危険 マイクロソフト
AVG Technologies
- Ewido Security Suite における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5530 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248022 9.3 危険 マイクロソフト
アラジン
- Aladdin eSafe における HTML 文書のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5528 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248023 9.3 危険 ESET
マイクロソフト
- ESET Smart Security における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5527 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248024 9.3 危険 マイクロソフト
Doctor Web
- DrWeb Anti-virus における HTML 文書のマルウェアの検知が回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5526 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248025 9.3 危険 マイクロソフト
ClamAV
- ClamAV における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5525 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248026 9.3 危険 マイクロソフト
AVAST Software s.r.o.
- avast! antivirus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5523 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248027 9.3 危険 マイクロソフト
AVG Technologies
- AVG Anti-Virus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5522 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248028 9.3 危険 マイクロソフト
free-av
- Avira AntiVir における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5521 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248029 9.4 危険 マイクロソフト
Apache Software Foundation
- Apache Geronimo Application Server の Web 管理コンソールにおけるファイルを任意のディレクトリにアップロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2008-5518 2012-06-26 16:03 2009-04-17 Show GitHub Exploit DB Packet Storm
248030 7.5 危険 Git project - gitweb の Web インターフェースにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-5517 2012-06-26 16:03 2009-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219911 7.5 HIGH
Network
varnish-cache
varnish-software
opensuse
debian
varnish_cache
leap
backports_sle
debian_linux
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There … CWE-617
 Reachable Assertion
CVE-2020-11653 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
219912 7.5 HIGH
Network
ixsystems freenas_firmware
truenas_firmware
An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length o… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-11650 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
219913 3.1 LOW
Network
istio
envoyproxy
istio
envoy
Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection (negotiated with SNI over HTTPS) to *.example.com, a request for a domain concurrently configured exp… NVD-CWE-noinfo
CVE-2020-11767 2024-11-21 13:58 2020-04-15 Show GitHub Exploit DB Packet Storm
219914 5.5 MEDIUM
Local
xen
fedoraproject
xen
fedora
An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 … CWE-755
 Improper Handling of Exceptional Conditions
CVE-2020-11743 2024-11-21 13:58 2020-04-14 Show GitHub Exploit DB Packet Storm
219915 5.5 MEDIUM
Local
xen
fedoraproject
xen
fedora
An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOP_copy. Grant table operations are expected to retur… NVD-CWE-Other
CVE-2020-11742 2024-11-21 13:58 2020-04-14 Show GitHub Exploit DB Packet Storm
219916 8.8 HIGH
Local
xen
fedoraproject
debian
opensuse
xen
fedora
debian_linux
leap
An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain sensitive information about other guests, cause a denial of service, or possibly g… CWE-909
 Missing Initialization of Resource
CVE-2020-11741 2024-11-21 13:58 2020-04-14 Show GitHub Exploit DB Packet Storm
219917 7.8 HIGH
Local
xen
fedoraproject
debian
opensuse
xen
fedora
debian_linux
leap
An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read… CWE-362
Race Condition
CVE-2020-11739 2024-11-21 13:58 2020-04-14 Show GitHub Exploit DB Packet Storm
219918 7.8 HIGH
Local
linux linux_kernel snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effe… NVD-CWE-noinfo
CVE-2020-11725 2024-11-21 13:58 2020-04-13 Show GitHub Exploit DB Packet Storm
219919 9.8 CRITICAL
Network
konghq docker-kong An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on interfaces other than 127.0.0.1. NOTE: The vendor argue that this CVE is not a vulnerability b… NVD-CWE-Other
CVE-2020-11710 2024-11-21 13:58 2020-04-13 Show GitHub Exploit DB Packet Storm
219920 5.3 MEDIUM
Network
argoproj argo_cd Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid (non-SSO) accounts because /api/v1/session returned… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-11576 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm