Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226551 7.5 危険 xigla - Absolute Content Rotator における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6862 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
226552 7.5 危険 xigla - Xigla Software Absolute Newsletter における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6861 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
226553 7.5 危険 xigla - Xigla Software Absolute Poll Manager XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6860 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
226554 7.5 危険 xigla - Xigla Software Absolute Control Panel XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6859 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
226555 7.5 危険 xigla - Absolute Banner Manager .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6858 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
226556 7.5 危険 xigla - Absolute Podcast .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6857 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
226557 7.5 危険 xigla - Xigla Software Absolute News Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6856 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
226558 7.5 危険 xigla - Xigla Software Absolute News Feed における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6855 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
226559 7.5 危険 xigla - Xigla Software Absolute FAQ Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6854 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
226560 4.3 警告 PHP-Fusion - PHP-Fusion の messages.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6850 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199861 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Exclude these IP… CWE-79
Cross-site Scripting 		CVE-2020-36413 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm
199862 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Search Text" fie… CWE-79
Cross-site Scripting 		CVE-2020-36412 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm
199863 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Path for the {pa… CWE-79
Cross-site Scripting 		CVE-2020-36411 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm
199864 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Email address to… CWE-79
Cross-site Scripting 		CVE-2020-36410 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm
199865 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Category" pa… CWE-79
Cross-site Scripting 		CVE-2020-36409 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm
199866 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" pa… CWE-79
Cross-site Scripting 		CVE-2020-36408 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm
199867 5.4 MEDIUM
Network 		phplist phplist A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "rule1" parameter under the "Bounce… CWE-79
Cross-site Scripting 		CVE-2020-36399 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm
199868 5.4 MEDIUM
Network 		phplist phplist A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "Campaign" field under the "Send a … CWE-79
Cross-site Scripting 		CVE-2020-36398 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm
199869 5.4 MEDIUM
Network 		lavalite lavalite A stored cross site scripting (XSS) vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted paylo… CWE-79
Cross-site Scripting 		CVE-2020-36397 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm
199870 5.4 MEDIUM
Network 		lavalite lavalite A stored cross site scripting (XSS) vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload en… CWE-79
Cross-site Scripting 		CVE-2020-36396 2024-11-21 14:29 2021-07-3 Show GitHub Exploit DB Packet Storm