Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226391	4.3	警告	CJ Niemira	-	phpMyID の MyID.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4730	2012-12-20 18:52	2008-10-24	Show	GitHub Exploit DB Packet Storm

226392	4.3	警告	sungard	-	SunGard Banner Student のコンタクトアップデートページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4727	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

226393	7.5	危険	X7 Group	-	X7 Chat の help/mini.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4718	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

226394	7.5	危険	zeeways	-	ZEELYRICS の bannerclick.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4717	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

226395	7.5	危険	scriptdemo	-	BitmixSoft PHP-Lance の show.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4716	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

226396	7.5	危険	pilotgroup	-	PG eTraining の news_read.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4709	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

226397	7.5	危険	sylvain pasquet	-	BbZL.PhP における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-4708	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

226398	5	警告	sylvain pasquet	-	BbZL.PhP の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4707	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

226399	7.5	危険	vBulletin Solutions, Inc.	-	VBGooglemap Hotspot Edition モジュールなどにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4706	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

226400	7.5	危険	phponlinedatingsoftware	-	php Online Dating Software MyPHPDating の success_story.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4705	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198531	8.8	HIGH Network	aomedia	aomedia	AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.	CWE-120 Classic Buffer Overflow	CVE-2020-36133	2024-11-21 14:28	2021-12-3	Show	GitHub Exploit DB Packet Storm

198532	8.8	HIGH Network	aomedia	aomedia	AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.	CWE-787 Out-of-bounds Write	CVE-2020-36131	2024-11-21 14:28	2021-12-3	Show	GitHub Exploit DB Packet Storm

198533	6.5	MEDIUM Network	aomedia	aomedia	AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.	CWE-476 NULL Pointer Dereference	CVE-2020-36130	2024-11-21 14:28	2021-12-3	Show	GitHub Exploit DB Packet Storm

198534	8.8	HIGH Network	aomedia	aomedia	AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.	CWE-787 Out-of-bounds Write	CVE-2020-36129	2024-11-21 14:28	2021-12-3	Show	GitHub Exploit DB Packet Storm

198535	9.8	CRITICAL Network	water_billing_system_project	water_billing_system	SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php.	CWE-89 SQL Injection	CVE-2020-36033	2024-11-21 14:28	2021-07-23	Show	GitHub Exploit DB Packet Storm

198536	5.4	MEDIUM Network	rukovoditel	rukovoditel	A stored cross site scripting (XSS) vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ent…	CWE-79 Cross-site Scripting	CVE-2020-35987	2024-11-21 14:28	2021-07-10	Show	GitHub Exploit DB Packet Storm

198537	5.4	MEDIUM Network	rukovoditel	rukovoditel	A stored cross site scripting (XSS) vulnerability in the 'Users Access Groups' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted paylo…	CWE-79 Cross-site Scripting	CVE-2020-35986	2024-11-21 14:28	2021-07-10	Show	GitHub Exploit DB Packet Storm

198538	5.4	MEDIUM Network	rukovoditel	rukovoditel	A stored cross site scripting (XSS) vulnerability in the 'Global Lists" feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ente…	CWE-79 Cross-site Scripting	CVE-2020-35985	2024-11-21 14:28	2021-07-10	Show	GitHub Exploit DB Packet Storm

198539	5.4	MEDIUM Network	rukovoditel	rukovoditel	A stored cross site scripting (XSS) vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ente…	CWE-79 Cross-site Scripting	CVE-2020-35984	2024-11-21 14:28	2021-07-10	Show	GitHub Exploit DB Packet Storm

198540	6.1	MEDIUM Network	qnap	qulog_center	A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc.…	CWE-79 Cross-site Scripting	CVE-2020-36196	2024-11-21 14:28	2021-07-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed