Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226221	7.5	危険	sepcity	-	SepCity Faculty Portal の deptdisplay.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6152	2012-12-20 19:10	2009-02-16	Show	GitHub Exploit DB Packet Storm

226222	7.5	危険	sepcity	-	SepCity Shopping Mall の shpdetails.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6151	2012-12-20 19:10	2009-02-16	Show	GitHub Exploit DB Packet Storm

226223	7.5	危険	sepcity	-	SepCity Classified Ads の classdis.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6150	2012-12-20 19:10	2009-02-16	Show	GitHub Exploit DB Packet Storm

226224	7.5	危険	raven-worx	-	Joomla! 用の liveticker モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6148	2012-12-20 19:10	2009-02-16	Show	GitHub Exploit DB Packet Storm

226225	7.5	危険	Web-Empowered Church Team	-	TYPO3 用の WEC Discussion Forum エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6145	2012-12-20 19:10	2009-02-16	Show	GitHub Exploit DB Packet Storm

226226	4.3	警告	Web-Empowered Church Team	-	TYPO3 用の WEC Discussion Forum エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6144	2012-12-20 19:10	2009-02-16	Show	GitHub Exploit DB Packet Storm

226227	5	警告	webbiscuits	-	WebBiscuits Modules Controller の faqsupport/wce.download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6139	2012-12-20 19:10	2009-02-13	Show	GitHub Exploit DB Packet Storm

226228	7.5	危険	webbiscuits	-	WebBiscuits Modules Controller の adminhead.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6138	2012-12-20 19:10	2009-02-13	Show	GitHub Exploit DB Packet Storm

226229	7.5	危険	socialengine	-	SocialEngine における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2008-6121	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226230	7.5	危険	socialengine	-	SocialEngine の profile_comments.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6120	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199671	5.3	MEDIUM Network	mbconnectline helmholz	mbconnect24 mymbconnect24 myrex24.virtual myrex24	An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can read arbitrary JSON files via Local Fil…	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2020-35566	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

199672	9.8	CRITICAL Network	mbconnectline	mbconnect24 mymbconnect24	An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The login pages bruteforce detection is disabled by default.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-35565	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

199673	7.5	HIGH Network	mbconnectline	mbconnect24 mymbconnect24	An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused component allowing for malicious user input of active code.	CWE-74 Injection	CVE-2020-35564	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

199674	5.4	MEDIUM Network	mbconnectline	mbconnect24 mymbconnect24	An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an incomplete XSS filter allowing an attacker to inject crafted malicious code into the page.	CWE-79 Cross-site Scripting	CVE-2020-35563	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

199675	5.3	MEDIUM Network	mbconnectline helmholz	mbconnect24 mymbconnect24 myrex24.virtual myrex24	An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. There is an SSRF in the HA module allowing an unauthentica…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35561	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

199676	6.1	MEDIUM Network	mbconnectline	mbconnect24 mymbconnect24	An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unauthenticated open redirect in the redirect.php.	CWE-601 Open Redirect	CVE-2020-35560	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

199677	4.3	MEDIUM Network	mbconnectline	mbconnect24 mymbconnect24	An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to use up all available IPs of an account and…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-35559	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

199678	7.5	HIGH Network	mbconnectline helmholz	mbconnect24 mymbconnect24 myrex24.virtual myrex24	An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. There is an SSRF in the in the MySQL access check, allowing an attacker …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35558	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

199679	6.5	MEDIUM Network	mbconnectline helmholz	mbconnect24 mymbconnect24 myrex24.virtual myrex24	An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not hav…	CWE-269 Improper Privilege Management	CVE-2020-35557	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

199680	7.2	HIGH Network	batflat	batflat	Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Users tab. To exploit this, one must login to the …	CWE-94 Code Injection	CVE-2020-35734	2024-11-21 14:27	2021-02-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed