Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227091 6.8 警告 Zen Cart - Zen Cart の includes/classes/shopping_cart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6985 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
227092 5 警告 phpadultsite - phpAdultSite CMS の index.php における SQL インジェクションの脆弱性 CWE-200
情報漏えい 		CVE-2008-6981 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
227093 7.5 危険 phpadultsite - phpAdultSite CMS の as_archives.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6980 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
227094 7.5 危険 Pligg - Pligg CMS の submit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6968 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
227095 7.5 危険 X7 Group - X7 Chat のログインページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6964 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
227096 7.5 危険 turnkeyforms - TurnkeyForms Text Link Sales の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6963 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
227097 5 警告 x10media - X10media x10 Automatic Mp3 Search Engine Script の download.php における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6960 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
227098 7.5 危険 wowraidmanager - WoW Raid Manager の auth/auth_phpbb3.php における認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7050 2012-12-20 19:10 2008-10-13 Show GitHub Exploit DB Packet Storm
227099 7.5 危険 Simple Machines - SMF のパスワードリセット機能における他のユーザのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-6971 2012-12-20 19:10 2008-09-7 Show GitHub Exploit DB Packet Storm
227100 7.5 危険 UBB Systems - UBB.threads の dosearch.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6970 2012-12-20 19:10 2008-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209881 7.3 HIGH
Network 		mattermost mattermost_desktop An issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is mishandled during access-control decisions for web APIs, aka MMSA-2020-0006. CWE-346
 Origin Validation Error 		CVE-2020-14456 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm
209882 6.5 MEDIUM
Network 		mattermost mattermost_desktop An issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic Authentication is mishandled, allowing phishing, aka MMSA-2020-0007. CWE-287
Improper Authentication 		CVE-2020-14455 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm
209883 6.1 MEDIUM
Network 		mattermost mattermost_desktop An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application because server redirection is mishandled, aka MMSA-2020-0008. CWE-601
Open Redirect 		CVE-2020-14454 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm
209884 7.5 HIGH
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.21.0. Socket read operations are not appropriately restricted, which allows attackers to cause a denial of service, aka MMSA-2020-0005. CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-14453 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm
209885 5.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.21.0. mmctl allows directory traversal via HTTP, aka MMSA-2020-0014. CWE-22
Path Traversal 		CVE-2020-14452 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm
209886 7.5 HIGH
Network 		mattermost mattermost_mobile An issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign-On cookies and Local Storage to remain after a logout, aka MMSA-2020-0013. CWE-459
 Incomplete Cleanup 		CVE-2020-14451 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm
209887 7.5 HIGH
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.22.0. The markdown renderer allows attackers to cause a denial of service (client-side), aka MMSA-2020-0017. NVD-CWE-noinfo
CVE-2020-14450 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm
209888 7.5 HIGH
Network 		mattermost mattermost_mobile An issue was discovered in Mattermost Mobile Apps before 1.30.0. Authorization tokens can sometimes be disclosed to third-party servers, aka MMSA-2020-0018. NVD-CWE-noinfo
CVE-2020-14449 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm
209889 7.5 HIGH
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies allow attackers to cause a denial of service (infinite loop), aka MMSA-2020-0020. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-14448 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm
209890 7.5 HIGH
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.23.0. Large webhook requests allow attackers to cause a denial of service (infinite loop), aka MMSA-2020-0021. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-14447 2024-11-21 14:03 2020-06-19 Show GitHub Exploit DB Packet Storm