Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226501 7.5 危険 Pligg - Pligg CMS の submit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6968 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
226502 7.5 危険 X7 Group - X7 Chat のログインページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6964 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
226503 7.5 危険 turnkeyforms - TurnkeyForms Text Link Sales の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6963 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
226504 5 警告 x10media - X10media x10 Automatic Mp3 Search Engine Script の download.php における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6960 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
226505 7.5 危険 wowraidmanager - WoW Raid Manager の auth/auth_phpbb3.php における認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7050 2012-12-20 19:10 2008-10-13 Show GitHub Exploit DB Packet Storm
226506 7.5 危険 Simple Machines - SMF のパスワードリセット機能における他のユーザのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-6971 2012-12-20 19:10 2008-09-7 Show GitHub Exploit DB Packet Storm
226507 7.5 危険 UBB Systems - UBB.threads の dosearch.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6970 2012-12-20 19:10 2008-09-2 Show GitHub Exploit DB Packet Storm
226508 10 危険 raidsonic - RaidSonic ICY BOX NAS の userHandler.cgi における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-7081 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
226509 5 警告 phpclassifiedsscript - Team PHP PHP Classifieds Script におけるデータベース資格情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7080 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
226510 7.5 危険 relative - SailPlanner における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7077 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197161 8.8 HIGH
Network 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt. CWE-326
Inadequate Encryption Strength 		CVE-2020-5763 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
197162 7.5 HIGH
Network 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote attacker can stop the service due to a N… CWE-476
 NULL Pointer Dereference 		CVE-2020-5762 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
197163 7.5 HIGH
Network 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by s… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-5761 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
197164 7.8 HIGH
Local 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by craftin… CWE-78
OS Command  		CVE-2020-5760 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
197165 5.3 MEDIUM
Network 		kujirahand konawiki Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2020-5614 2024-11-21 14:34 2020-07-29 Show GitHub Exploit DB Packet Storm
197166 6.1 MEDIUM
Network 		kujirahand konawiki Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL. CWE-79
Cross-site Scripting 		CVE-2020-5613 2024-11-21 14:34 2020-07-29 Show GitHub Exploit DB Packet Storm
197167 6.1 MEDIUM
Network 		kujirahand konawiki Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL. CWE-79
Cross-site Scripting 		CVE-2020-5612 2024-11-21 14:34 2020-07-29 Show GitHub Exploit DB Packet Storm
197168 9.1 CRITICAL
Network 		dell emc_openmanage_server_administrator Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilit… CWE-22
Path Traversal 		CVE-2020-5377 2024-11-21 14:34 2020-07-29 Show GitHub Exploit DB Packet Storm
197169 8.8 HIGH
Network 		wpsocialrocket social_sharing Cross-site request forgery (CSRF) vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors. CWE-352
 Origin Validation Error 		CVE-2020-5611 2024-11-21 14:34 2020-07-27 Show GitHub Exploit DB Packet Storm
197170 5.4 MEDIUM
Network 		teltonika-networks gateway_trb245_firmware Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by injecting malicious client-s… CWE-79
Cross-site Scripting 		CVE-2020-5769 2024-11-21 14:34 2020-07-18 Show GitHub Exploit DB Packet Storm