Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226121 6.8 警告 phpclanwebsite - Phpclanwebsite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5877 2012-12-20 19:10 2009-01-8 Show GitHub Exploit DB Packet Storm
226122 7.5 危険 yerba - Yerba SACphp における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5873 2012-12-20 19:10 2009-01-8 Show GitHub Exploit DB Packet Storm
226123 4.3 警告 proxim - Proxim Wireless Tsunami におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5869 2012-12-20 19:10 2009-01-8 Show GitHub Exploit DB Packet Storm
226124 5 警告 yerba - Yerba SACphp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5867 2012-12-20 19:10 2009-01-7 Show GitHub Exploit DB Packet Storm
226125 10 危険 proxim - Proxim Wireless Tsunami における重要な情報を取得される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5866 2012-12-20 19:10 2009-01-7 Show GitHub Exploit DB Packet Storm
226126 7.5 危険 v-gn - wBB 用の Userlocator モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5863 2012-12-20 19:10 2009-01-6 Show GitHub Exploit DB Packet Storm
226127 5 警告 webcamxp - webcamXP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5862 2012-12-20 19:10 2009-01-6 Show GitHub Exploit DB Packet Storm
226128 4 警告 シックス・アパート株式会社 - Six Apart MT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5846 2012-12-20 19:10 2009-01-5 Show GitHub Exploit DB Packet Storm
226129 7.5 危険 phpicalendar - PHP iCalendar における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5840 2012-12-20 19:10 2009-01-5 Show GitHub Exploit DB Packet Storm
226130 6.8 警告 web scribble solutions - Web Scribble Solutions webClassifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5817 2012-12-20 19:10 2009-01-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199261 7.8 HIGH
Local 		linux
netapp 		linux_kernel
cloud_backup
solidfire_baseboard_management_controller_firmware
h300s_firmware
h500s_firmware
h700s_firmware
h300e_firmware
h500e_firmware
h700e_firmware
h410s… 		An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the sy… - CVE-2020-35519 2024-11-21 14:27 2021-05-7 Show GitHub Exploit DB Packet Storm
199262 9.8 CRITICAL
Network 		inxedu inxedu SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6 via the ids parameter to admin/letter/delsystem. CWE-89
SQL Injection 		CVE-2020-35430 2024-11-21 14:27 2021-04-30 Show GitHub Exploit DB Packet Storm
199263 5.4 MEDIUM
Network 		unisys data_exchange_management_studio Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack. CWE-79
Cross-site Scripting 		CVE-2020-35542 2024-11-21 14:27 2021-04-27 Show GitHub Exploit DB Packet Storm
199264 9.8 CRITICAL
Network 		wondercms wondercms A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary cod… CWE-78
OS Command  		CVE-2020-35314 2024-11-21 14:27 2021-04-21 Show GitHub Exploit DB Packet Storm
199265 9.8 CRITICAL
Network 		wondercms wondercms A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to execute arbitrary code via a crafted URL t… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-35313 2024-11-21 14:27 2021-04-21 Show GitHub Exploit DB Packet Storm
199266 5.4 MEDIUM
Network 		monicahq monica Cross Site Scripting (XSS) in Monica before 2.19.1 via the journal page. CWE-79
Cross-site Scripting 		CVE-2020-35660 2024-11-21 14:27 2021-04-15 Show GitHub Exploit DB Packet Storm
199267 6.1 MEDIUM
Network 		group-office group_office Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter. CWE-79
Cross-site Scripting 		CVE-2020-35419 2024-11-21 14:27 2021-04-15 Show GitHub Exploit DB Packet Storm
199268 5.4 MEDIUM
Network 		group-office group_office Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file. CWE-79
Cross-site Scripting 		CVE-2020-35418 2024-11-21 14:27 2021-04-15 Show GitHub Exploit DB Packet Storm
199269 9.8 CRITICAL
Network 		conquest_dicom_server_project conquest_dicom_server CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code. NVD-CWE-noinfo
CVE-2020-35308 2024-11-21 14:27 2021-04-1 Show GitHub Exploit DB Packet Storm
199270 5.3 MEDIUM
Network 		redhat 389_directory_server
enterprise_linux
directory_server 		When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of a… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-35518 2024-11-21 14:27 2021-03-27 Show GitHub Exploit DB Packet Storm