Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227041	7.5	危険	yarck	-	SH-News の action.php における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-6664	2012-12-20 19:10	2009-04-8	Show	GitHub Exploit DB Packet Storm

227042	7.5	危険	phpauctions	-	PHPAuctions.info PHPAuctions の profile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6663	2012-12-20 19:10	2009-04-8	Show	GitHub Exploit DB Packet Storm

227043	4.3	警告	structum	-	InfoBiz Server の search_results.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6654	2012-12-20 19:10	2009-04-7	Show	GitHub Exploit DB Packet Storm

227044	7.5	危険	wh-com	-	Joomla! および Mambo 用の webhosting.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6653	2012-12-20 19:10	2009-04-7	Show	GitHub Exploit DB Packet Storm

227045	8.8	危険	versalsoft	-	Versalsoft HTTP Image Uploader ActiveX コントロールにおける任意のファイルを削除される脆弱性	CWE-16 環境設定	CVE-2008-6638	2012-12-20 19:10	2009-04-7	Show	GitHub Exploit DB Packet Storm

227046	7.8	危険	TYPO3 Association	-	TYPO3 用の wt_gallery エクステンションにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6630	2012-12-20 19:10	2009-04-7	Show	GitHub Exploit DB Packet Storm

227047	4.3	警告	webbdomain	-	WEBBDOMAIN Multi Languages WebShop Online の detail.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6629	2012-12-20 19:10	2009-04-6	Show	GitHub Exploit DB Packet Storm

227048	7.5	危険	webbdomain	-	WEBBDOMAIN WebShop の getin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6627	2012-12-20 19:10	2009-04-6	Show	GitHub Exploit DB Packet Storm

227049	7.5	危険	webbdomain	-	WEBBDOMAIN Quiz の getin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6626	2012-12-20 19:10	2009-04-6	Show	GitHub Exploit DB Packet Storm

227050	7.5	危険	webbdomain	-	WEBBDOMAIN Polls の getin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6625	2012-12-20 19:10	2009-04-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210131	6.5	MEDIUM Network	libreoffice opensuse fedoraproject	libreoffice leap fedora	ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable f…	CWE-20 Improper Input Validation	CVE-2020-12803	2024-11-21 14:00	2020-06-9	Show	GitHub Exploit DB Packet Storm

210132	7.5	HIGH Network	ui w1.fi asus broadcom canon cisco dlink dell epson hp huawei nec netgear ruckussecurity tp-link zte zyxel microsoft fedoraproject debian canonical	unifi_controller hostapd rt-n11 adsl selphy_cp1200 wap150 wap351 wap131 dvg-n5412sp b1165nfw ew-m970a3t ep-101 xp-8500 xp-702 xp-340 xp-620 xp-320 x…	The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualif…	CWE-276 Incorrect Default Permissions	CVE-2020-12695	2024-11-21 14:00	2020-06-9	Show	GitHub Exploit DB Packet Storm

210133	5.3	MEDIUM Network	libreoffice fedoraproject opensuse	libreoffice fedora leap	LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who w…	NVD-CWE-Other	CVE-2020-12802	2024-11-21 14:00	2020-06-9	Show	GitHub Exploit DB Packet Storm

210134	8.8	HIGH Network	realtek	adsl_router_soc_firmware	A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a default password to execute arbitrary commands remotely via the…	NVD-CWE-noinfo	CVE-2020-12773	2024-11-21 14:00	2020-06-8	Show	GitHub Exploit DB Packet Storm

210135	7.5	HIGH Network	perl netapp fedoraproject opensuse oracle	perl snap_creator_framework oncommand_workflow_automation fedora leap communications_eagle_lnp_application_processor sd-wan_edge enterprise_manager_base_platform communication…	regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.	CWE-120 Classic Buffer Overflow	CVE-2020-12723	2024-11-21 14:00	2020-06-6	Show	GitHub Exploit DB Packet Storm

210136	5.4	MEDIUM Network	pydio	cells	Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user roles. These profile pictures can later be accessed directly with the generated …	CWE-79 Cross-site Scripting	CVE-2020-12849	2024-11-21 14:00	2020-06-5	Show	GitHub Exploit DB Packet Storm

210137	5.4	MEDIUM Network	pydio	cells	In Pydio Cells 2.0.4, once an authenticated user shares a file selecting the create a public link option, a hidden shared user account is created in the backend with a random username. An anonymous u…	CWE-287 Improper Authentication	CVE-2020-12848	2024-11-21 14:00	2020-06-5	Show	GitHub Exploit DB Packet Storm

210138	6.1	MEDIUM Network	pydio	cells	Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially malicious HTML and JavaScript code to personal folders or accessible cells.	CWE-79 Cross-site Scripting	CVE-2020-12853	2024-11-21 14:00	2020-06-5	Show	GitHub Exploit DB Packet Storm

210139	8.1	HIGH Network	pydio	cells	Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositories) by uploading a custom generated ZIP file and leveraging…	CWE-22 Path Traversal	CVE-2020-12851	2024-11-21 14:00	2020-06-5	Show	GitHub Exploit DB Packet Storm

210140	6.8	MEDIUM Network	pydio	cells	The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key used to validate the downloaded update package. The update process involves dow…	CWE-20 Improper Input Validation	CVE-2020-12852	2024-11-21 14:00	2020-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed