Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226011	7.5	危険	scripts-for-sites	-	SFS EZ Gaming Cheats の view_reviews.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6244	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

226012	7.5	危険	scripts-for-sites	-	SFS Hotscripts-like Site の showcategory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6243	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

226013	7.5	危険	scripts-for-sites	-	SFS EZ e-store の SearchResults.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6242	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

226014	7.5	危険	scripts-for-sites	-	SFS Hotscripts-like Site の software-description.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6237	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

226015	7.5	危険	PreProject.com	-	Pre Shopping Mall における認証を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-6232	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

226016	7.5	危険	PreProject.com	-	Pre Classified Listing PHP における認証を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-6231	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

226017	7.5	危険	PreProject.com	-	Pre Projects Pre Podcast Portal の Tour.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6230	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

226018	7.5	危険	PreProject.com	-	Pre Multi-Vendor Shopping Malls における管理アクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-6228	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

226019	7.5	危険	PreProject.com	-	Pre Multi-Vendor Shopping Malls の buyer_detail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6227	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

226020	6.8	警告	PreProject.com	-	Pre Projects PHP Auto Listings Script の moreinfo.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6226	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199241	7.5	HIGH Network	expertpdf	expertpdf	A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read.	CWE-552 Files or Directories Accessible to External Parties	CVE-2020-35340	2024-11-21 14:27	2021-09-15	Show	GitHub Exploit DB Packet Storm

199242	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() store_sm_boundary_item() Sloop_of OOB r…	-	CVE-2020-35635	2024-11-21 14:27	2021-08-31	Show	GitHub Exploit DB Packet Storm

199243	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() s…	-	CVE-2020-35634	2024-11-21 14:27	2021-08-31	Show	GitHub Exploit DB Packet Storm

199244	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() s…	-	CVE-2020-35633	2024-11-21 14:27	2021-08-31	Show	GitHub Exploit DB Packet Storm

199245	7.5	HIGH Network	hcc-embedded siemens	nichestack 7km9300-0ae02-0aa0_firmware	An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the ICMP checksum. When …	CWE-125 Out-of-bounds Read	CVE-2020-35683	2024-11-21 14:27	2021-08-19	Show	GitHub Exploit DB Packet Storm

199246	9.1	CRITICAL Network	hcc-embedded siemens	nichestack sentron_3wa_com190_firmware sentron_3wl_com35_firmware	An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attack…	CWE-330 Use of Insufficiently Random Values	CVE-2020-35685	2024-11-21 14:27	2021-08-19	Show	GitHub Exploit DB Packet Storm

199247	7.5	HIGH Network	hcc-embedded siemens	nichestack sentron_3wl_com35_firmware sentron_3wa_com190_firmware	An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the length of the TCP pay…	CWE-20 Improper Input Validation	CVE-2020-35684	2024-11-21 14:27	2021-08-19	Show	GitHub Exploit DB Packet Storm

199248	9.8	CRITICAL Network	phpgurukul	employee_record_management_system	SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication.	CWE-89 SQL Injection	CVE-2020-35427	2024-11-21 14:27	2021-07-20	Show	GitHub Exploit DB Packet Storm

199249	6.1	MEDIUM Network	fiyo	fiyo_cms	In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.	CWE-79 Cross-site Scripting	CVE-2020-35373	2024-11-21 14:27	2021-06-18	Show	GitHub Exploit DB Packet Storm

199250	7.3	HIGH Network	apache debian fedoraproject oracle	http_server debian_linux fedora instantis_enterprisetrack enterprise_manager_ops_center zfs_storage_appliance_kit	Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP …	CWE-787 Out-of-bounds Write	CVE-2020-35452	2024-11-21 14:27	2021-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed