Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226731 9.3 危険 pragyan - Pragyan CMS の cms/modules/form.lib.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3207 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
226732 4.3 警告 xomol - Xomol CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3202 2012-12-20 18:52 2008-07-17 Show GitHub Exploit DB Packet Storm
226733 7.8 危険 reSIProcate - ReSIProcate におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3199 2012-12-20 18:52 2008-07-14 Show GitHub Exploit DB Packet Storm
226734 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-3197 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
226735 7.8 危険 yacc - yacc 内の skeleton.c における範囲外メモリのスタックにアクセスされる脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3196 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226736 6.8 警告 TWiki - TWiki の bin/configure におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3195 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
226737 6.8 警告 Pluck CMS - pluck の data/inc/themes/predefined_variables.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3194 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226738 7.5 危険 Sclek - jSite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3193 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226739 6.8 警告 Sclek - jSite の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3192 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226740 6.8 警告 vclcomponents - Relative Real Estate Systems の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3185 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210981 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10502 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
210982 6.5 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10501 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
210983 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10500 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
210984 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10499 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
210985 6.5 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10498 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
210986 6.5 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10497 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
210987 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10496 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
210988 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10495 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
210989 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10494 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
210990 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10493 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm