Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226321 7.5 危険 Zen Cart - Zen Software Zen Cart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6615 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
226322 10 危険 picoflat - PicoFlat CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6604 2012-12-20 19:10 2009-04-4 Show GitHub Exploit DB Packet Storm
226323 10 危険 stadtaus - Download Center Lite における脆弱性 CWE-noinfo
情報不足
CVE-2008-6602 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
226324 4.3 警告 xmlportal - XMLPortal の検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6600 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
226325 10 危険 Sangoma - WANPIPE における脆弱性 CWE-362
競合状態
CVE-2008-6598 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
226326 4.3 警告 phpcredo - PHCDownload の upload/install/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6597 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
226327 5.5 警告 Simple Machines - SMF の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6659 2012-12-20 19:10 2008-11-7 Show GitHub Exploit DB Packet Storm
226328 4 警告 Simple Machines - SMF の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6658 2012-12-20 19:10 2008-11-7 Show GitHub Exploit DB Packet Storm
226329 6.8 警告 Simple Machines - SMF の index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-6657 2012-12-20 19:10 2008-11-7 Show GitHub Exploit DB Packet Storm
226330 7.5 危険 phpcredo - PHCDownload の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6596 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197601 4.3 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through 12.6.1. It has Incorrect Access Control. CWE-200
Information Exposure
CVE-2020-5197 2024-11-21 14:33 2020-01-14 Show GitHub Exploit DB Packet Storm
197602 7.8 HIGH
Local
sparklabs viscosity Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a malicious library into the memory of the OpenVPN process, leading t… NVD-CWE-noinfo
CVE-2020-5180 2024-11-21 14:33 2020-01-15 Show GitHub Exploit DB Packet Storm
197603 6.1 MEDIUM
Network
cerberusftp ftp_server Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitrary JavaScript or HTML via a crafted public folder URL. This… CWE-79
Cross-site Scripting
CVE-2020-5195 2024-11-21 14:33 2020-01-14 Show GitHub Exploit DB Packet Storm
197604 6.1 MEDIUM
Network
phpgurukul dairy_farm_shop_management_system PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, a… CWE-79
Cross-site Scripting
CVE-2020-5308 2024-11-21 14:33 2020-01-9 Show GitHub Exploit DB Packet Storm
197605 5.4 MEDIUM
Network
powauth pow In Pow (Hex package) before 1.0.16, the use of Plug.Session in Pow.Plug.Session is susceptible to session fixation attacks if a persistent session store is used for Plug.Session, such as Redis or a d… CWE-384
 Session Fixation
CVE-2020-5205 2024-11-21 14:33 2020-01-9 Show GitHub Exploit DB Packet Storm
197606 7.5 HIGH
Network
ftpgetter ftpgetter FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string to the application. This memory corruption bug can possibly be classified as a … CWE-787
CWE-476
 Out-of-bounds Write
 NULL Pointer Dereference
CVE-2020-5183 2024-11-21 14:33 2020-01-9 Show GitHub Exploit DB Packet Storm
197607 9.8 CRITICAL
Network
phpgurukul dairy_farm_shop_management_system PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, … CWE-89
SQL Injection
CVE-2020-5307 2024-11-21 14:33 2020-01-8 Show GitHub Exploit DB Packet Storm
197608 8.8 HIGH
Network
troglobit uftpd In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the for… CWE-120
Classic Buffer Overflow
CVE-2020-5204 2024-11-21 14:33 2020-01-7 Show GitHub Exploit DB Packet Storm
197609 8.8 HIGH
Network
phpgurukul hospital_management_system PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for the application's dat… CWE-89
SQL Injection
CVE-2020-5192 2024-11-21 14:33 2020-01-6 Show GitHub Exploit DB Packet Storm
197610 6.1 MEDIUM
Network
phpgurukul hospital_management_system PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities. CWE-79
Cross-site Scripting
CVE-2020-5191 2024-11-21 14:33 2020-01-6 Show GitHub Exploit DB Packet Storm