Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224001 5 警告 vpasp - VP-ASP Shopping Cart におけるパスワードを含むデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5929 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
224002 7.5 危険 umerinc - Umer Inc Songs Portal の albums.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5921 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
224003 7.5 危険 tigris - WebSVN の utils.inc における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5920 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
224004 6.8 警告 tigris - WebSVN の rss.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5919 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
224005 4.3 警告 tigris - WebSVN の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5918 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
224006 7.5 危険 xrdp - xrdp の rdp/rdp_rdp.c における脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5904 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
224007 7.5 危険 xrdp - xrdp の xrdp/funcs.c における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2008-5903 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
224008 7.5 危険 xrdp - xrdp の xrdp/xrdp_bitmap.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5902 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
224009 5 警告 Tincan - phplist におけるファイルをインクルードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5887 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
224010 5 警告 takempis - TAKempis Discussion Web におけるパスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5886 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1511 6.5 MEDIUM
Adjacent 		alfa
siemens
arista
cisco
intel 		awus036h_firmware
scalance_w1748-1_firmware
scalance_w1750d_firmware
scalance_w1788-1_firmware
scalance_w1788-2_firmware
scalance_w1788-2ia_firmware
scalance_w721-1_firmware
scal… 		Se detectó un problema en el controlador ALFA de Windows 10 versión 6.1316.1209 para AWUS036H. Las implementaciones WEP, WPA, WPA2 y WPA3 aceptan tramas de texto plano en una red Wi-Fi protegida. Un … CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-26140 2026-04-14 18:16 2021-05-12 Show GitHub Exploit DB Packet Storm
1512 5.3 MEDIUM
Adjacent 		netbsd
debian
arista
cisco
intel 		netbsd
debian_linux
c-100_firmware
c-110_firmware
c-120_firmware
c-130_firmware
c-200_firmware
c-230_firmware
c-235_firmware
c-250_firmware
c-260_firmware
c-65_firmwa… 		An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be… CWE-287
Improper Authentication 		CVE-2020-26139 2026-04-14 18:16 2021-05-12 Show GitHub Exploit DB Packet Storm
1513 5.3 MEDIUM
Adjacent 		netbsd
debian
arista
cisco
intel 		netbsd
debian_linux
c-100_firmware
c-110_firmware
c-120_firmware
c-130_firmware
c-200_firmware
c-230_firmware
c-235_firmware
c-250_firmware
c-260_firmware
c-65_firmwa… 		Se detectó un problema en el kernel en NetBSD versión 7.1. Un punto de acceso (AP) reenvía tramas EAPOL a otros clientes aunque el remitente aún no se haya autenticado con éxito en el AP. Esto podría… CWE-287
Improper Authentication 		CVE-2020-26139 2026-04-14 18:16 2021-05-12 Show GitHub Exploit DB Packet Storm
1514 3.5 LOW
Adjacent 		ieee
linux
microsoft
debian
siemens
arista
cisco
intel 		ieee_802.11
mac80211
windows_10
windows_7
windows_8.1
windows_rt_8.1
windows_server_2008
windows_server_2012
windows_server_2016
windows_server_2019
debian_linux
scal… 		The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authentica… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-24588 2026-04-14 18:16 2021-05-12 Show GitHub Exploit DB Packet Storm
1515 3.5 LOW
Adjacent 		ieee
linux
microsoft
debian
siemens
arista
cisco
intel 		ieee_802.11
mac80211
windows_10
windows_7
windows_8.1
windows_rt_8.1
windows_server_2008
windows_server_2012
windows_server_2016
windows_server_2019
debian_linux
scal… 		El estándar 802.11 que sustenta a Wi-Fi Protected Access (WPA, WPA2, y WPA3) y Wired Equivalent Privacy (WEP) no requiere que el flag A-MSDU en el campo de encabezado QoS de texto plano esté autentic… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-24588 2026-04-14 18:16 2021-05-12 Show GitHub Exploit DB Packet Storm
1516 6.5 MEDIUM
Network 		- - The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5. This is due to the … CWE-94
Code Injection 		CVE-2026-2582 2026-04-14 16:16 2026-04-14 Show GitHub Exploit DB Packet Storm
1517 7.2 HIGH
Network 		- - The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.12 via deserializ… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-3017 2026-04-14 15:16 2026-04-14 Show GitHub Exploit DB Packet Storm
1518 4.4 MEDIUM
Network 		- - The WholeSale Products Dynamic Pricing Management WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2 due to ins… CWE-79
Cross-site Scripting 		CVE-2026-4479 2026-04-14 13:17 2026-04-14 Show GitHub Exploit DB Packet Storm
1519 6.4 MEDIUM
Network 		- - The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the woolentor_quickview_button shortcode's button_text attribute in all versions up to, and including, 3.3.5. This… CWE-79
Cross-site Scripting 		CVE-2026-4059 2026-04-14 13:17 2026-04-14 Show GitHub Exploit DB Packet Storm
1520 6.4 MEDIUM
Network 		- - The Surbma | Booking.com Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `surbma-bookingcom` shortcode in all versions up to, and including, 2.1 due to in… CWE-79
Cross-site Scripting 		CVE-2026-1607 2026-04-14 13:17 2026-04-14 Show GitHub Exploit DB Packet Storm