Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226811 7.5 危険 txtshop - TXTshop の header.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6083 2012-12-20 19:10 2009-02-6 Show GitHub Exploit DB Packet Storm
226812 4.3 警告 加藤和良 - WRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6161 2012-12-20 19:10 2008-10-6 Show GitHub Exploit DB Packet Storm
226813 5 警告 South River Technologies - Titan FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-6082 2012-12-20 19:10 2009-02-6 Show GitHub Exploit DB Packet Storm
226814 7.5 危険 simplecustomer - Simple Customer の contact.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6081 2012-12-20 19:10 2009-02-6 Show GitHub Exploit DB Packet Storm
226815 7.5 危険 rasihbahar - Bahar Download Script の aspkat.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6075 2012-12-20 19:10 2009-02-6 Show GitHub Exploit DB Packet Storm
226816 5.1 警告 phpcrs - phpcrs の frame.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6074 2012-12-20 19:10 2009-02-6 Show GitHub Exploit DB Packet Storm
226817 7.5 危険 web design hero - Joomla! 用の JoomlaDate コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6068 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
226818 4.3 警告 テックスミス株式会社 - Techsmith Camtasia Studio が作成した任意の SWF コントローラーファイルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6061 2012-12-20 19:10 2009-02-4 Show GitHub Exploit DB Packet Storm
226819 5 警告 syslserve - Syslserve におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-6058 2012-12-20 19:10 2009-02-4 Show GitHub Exploit DB Packet Storm
226820 5 警告 PreProject.com - PreProjects Pre Classified Listings におけるパスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6055 2012-12-20 19:10 2009-02-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210581 8.8 HIGH
Network
rittal cmciii-pu-9333e0fb_firmware
pdu-3c002dec_firmware
cmc_iii_pu_7030.000_firmware
lcp-cw_firmware
iot_interface_3124.300
An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.70_4 devices. Attackers can execute code. CWE-78
OS Command 
CVE-2020-11953 2024-11-21 13:58 2020-07-14 Show GitHub Exploit DB Packet Storm
210582 6.2 MEDIUM
Local
rittal cmciii-pu-9333e0fb_firmware
pdu-3c002dec_firmware
cmc_iii_pu_7030.000_firmware
lcp-cw_firmware
iot_interface_3124.300
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers can bypass the CLI menu. NVD-CWE-noinfo
CVE-2020-11952 2024-11-21 13:58 2020-07-14 Show GitHub Exploit DB Packet Storm
210583 9.8 CRITICAL
Network
rittal cmciii-pu-9333e0fb_firmware
pdu-3c002dec_firmware
cmc_iii_pu_7030.000_firmware
lcp-cw_firmware
iot_interface_3124.300
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account. CWE-798
 Use of Hard-coded Credentials
CVE-2020-11951 2024-11-21 13:58 2020-07-14 Show GitHub Exploit DB Packet Storm
210584 9.0 CRITICAL
Network
pandorafms pandora_fms Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting (XSS), which can run … CWE-79
Cross-site Scripting
CVE-2020-11749 2024-11-21 13:58 2020-07-14 Show GitHub Exploit DB Packet Storm
210585 9.8 CRITICAL
Network
microfocus identity_manager Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information expos… NVD-CWE-noinfo
CVE-2020-11849 2024-11-21 13:58 2020-07-8 Show GitHub Exploit DB Packet Storm
210586 6.1 MEDIUM
Network
telefonica o2_business The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. The purpose of this activity is to handle deeplinks that can be delivered either … CWE-601
Open Redirect
CVE-2020-11882 2024-11-21 13:58 2020-07-8 Show GitHub Exploit DB Packet Storm
210587 8.1 HIGH
Network
python
fedoraproject
canonical
pillow
fedora
ubuntu_linux
In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311. CWE-125
Out-of-bounds Read
CVE-2020-11538 2024-11-21 13:58 2020-06-26 Show GitHub Exploit DB Packet Storm
210588 5.3 MEDIUM
Network
wolfssl wolfssl The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak." CWE-203
 Information Exposure Through Discrepancy
CVE-2020-11735 2024-11-21 13:58 2020-06-25 Show GitHub Exploit DB Packet Storm
210589 7.5 HIGH
Network
mi xiaomi_r3600_firmware Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get_config_result without authentication CWE-306
Missing Authentication for Critical Function
CVE-2020-11961 2024-11-21 13:58 2020-06-25 Show GitHub Exploit DB Packet Storm
210590 9.8 CRITICAL
Network
mi xiaomi_r3600_firmware Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious file under any location in /tmp, lead to po… NVD-CWE-noinfo
CVE-2020-11960 2024-11-21 13:58 2020-06-25 Show GitHub Exploit DB Packet Storm