Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226511 10 危険 project-observer - Observer における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4318 2012-12-20 18:52 2008-09-29 Show GitHub Exploit DB Packet Storm
226512 9 危険 phpCollab - phpCollab の installation/setup.php における include/settings.php に任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4305 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
226513 10 危険 phpCollab - phpCollab の general/login.php における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2008-4304 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
226514 6.8 警告 phpCollab - phpCollab における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4303 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
226515 6.5 警告 rianxosencabos cms - Rianxosencabos CMS の Admin Control Panel におけるユーザの権限を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4245 2012-12-20 18:52 2008-09-25 Show GitHub Exploit DB Packet Storm
226516 7.5 危険 webcms - webCMS Portal Edition の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4185 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
226517 4.3 警告 webcms - webCMS Portal Edition の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4184 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
226518 7.5 危険 PreProject.com - Pre Real Estate Listings の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4177 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
226519 7.5 危険 proarcadescript - ProArcadeScript における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4173 2012-12-20 18:52 2008-09-22 Show GitHub Exploit DB Packet Storm
226520 7.5 危険 rfaah - Cars & Vehicle の page.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4172 2012-12-20 18:52 2008-09-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199101 5.3 MEDIUM
Network 		frappe frappe Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API. NVD-CWE-noinfo
CVE-2020-35175 2024-11-21 14:26 2020-12-12 Show GitHub Exploit DB Packet Storm
199102 5.3 MEDIUM
Network 		mquery_project mquery lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation. NVD-CWE-noinfo
CVE-2020-35149 2024-11-21 14:26 2020-12-12 Show GitHub Exploit DB Packet Storm
199103 8.8 HIGH
Network 		infolific ultimate_category_excluder The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF. CWE-352
 Origin Validation Error 		CVE-2020-35135 2024-11-21 14:26 2020-12-11 Show GitHub Exploit DB Packet Storm
199104 5.4 MEDIUM
Network 		phpldapadmin_project
fedoraproject 		phpldapadmin
fedora 		An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php. CWE-79
Cross-site Scripting 		CVE-2020-35132 2024-11-21 14:26 2020-12-11 Show GitHub Exploit DB Packet Storm
199105 5.4 MEDIUM
Network 		igniterealtime openfire Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS. CWE-79
Cross-site Scripting 		CVE-2020-35127 2024-11-21 14:26 2020-12-11 Show GitHub Exploit DB Packet Storm
199106 4.8 MEDIUM
Network 		typesettercms typesetter Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI. NOTE: the significance of this report is disputed because "admins are conside… CWE-79
Cross-site Scripting 		CVE-2020-35126 2024-11-21 14:26 2020-12-11 Show GitHub Exploit DB Packet Storm
199107 7.1 HIGH
Network 		oracle configuration_manager Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collection script). The supported version that is affected is 12.1.2.0.6. Easily explo… NVD-CWE-noinfo
CVE-2020-2984 2024-11-21 14:26 2020-07-16 Show GitHub Exploit DB Packet Storm
199108 7.1 HIGH
Network 		oracle data_masking_and_subsetting Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking). Supported versions that are affected are 13.3.0.0 and 13.4.0.0. Easily exploita… NVD-CWE-noinfo
CVE-2020-2983 2024-11-21 14:26 2020-07-16 Show GitHub Exploit DB Packet Storm
199109 7.1 HIGH
Network 		oracle enterprise_manager_base_platform Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 13.3.0.0 and 13.4.0.0. E… NVD-CWE-noinfo
CVE-2020-2982 2024-11-21 14:26 2020-07-16 Show GitHub Exploit DB Packet Storm
199110 7.0 HIGH
Local 		oracle berkeley_db Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with lo… NVD-CWE-noinfo
CVE-2020-2981 2024-11-21 14:26 2020-07-16 Show GitHub Exploit DB Packet Storm