Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227191 4.3 警告 ZyXEL - Zyxel P-2602HW-D1A ルータ上におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-1260 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227192 9.3 危険 ZyXEL - Zyxel P-2602HW-D1A ルータにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-1259 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227193 4.3 警告 ZyXEL - ZyXEL P-660HW シリーズルータ上で稼動する Forms/DiagGeneral_2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1257 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227194 10 危険 ZyXEL - ZyXEL P-660HW における管理アクセス権限を取得される脆弱性 CWE-DesignError
CVE-2008-1256 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227195 10 危険 ZyXEL - ZyXEL P-660HW シリーズルータにおける認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1255 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227196 6.8 警告 ZyXEL - ZyXEL P-660HW シリーズルータにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-1254 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227197 4.3 警告 snom - Snom 320 SIP Phone 用の中央電話サーバ上で稼動する Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1251 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227198 9.3 危険 snom - Snom 320 SIP Phone 用の中央電話サーバ上で稼動する Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-1250 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227199 9.4 危険 snom - Snom 320 SIP Phone 用の中央電話サーバ上で稼動する snomControl.swf におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1249 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
227200 5.8 警告 snom - Snom 320 SIP Phone 用の中央電話サーバ上で稼動する Web インターフェースにおける任意の電話を発信される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-1248 2012-12-20 18:34 2008-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200251 6.1 MEDIUM
Network 		secomea gatemanager_firmware Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager … CWE-79
Cross-site Scripting 		CVE-2020-29029 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200252 6.1 MEDIUM
Network 		secomea gatemanager_firmware Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4. CWE-79
Cross-site Scripting 		CVE-2020-29028 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200253 7.2 HIGH
Network 		secomea sitemanager_firmware Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea… CWE-863
 Incorrect Authorization 		CVE-2020-29020 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200254 7.2 HIGH
Network 		secomea gatemanager_8250_firmware Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateMana… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-29032 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200255 8.6 HIGH
Network 		totvs fluig The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4 CWE-22
Path Traversal 		CVE-2020-29134 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200256 9.8 CRITICAL
Network 		cgal
fedoraproject
debian 		computational_geometry_algorithms_library
fedora
debian_linux 		A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->… - CVE-2020-28636 2024-11-21 14:23 2021-03-5 Show GitHub Exploit DB Packet Storm
200257 9.8 CRITICAL
Network 		thimpress wp_hotel_booking The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in inclu… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-29047 2024-11-21 14:23 2021-03-4 Show GitHub Exploit DB Packet Storm
200258 9.8 CRITICAL
Network 		bittacora bpanel In bPanel 2.0, the administrative ajax endpoints (aka ajax/aj_*.php) are accessible without authentication and allow SQL injections, which could lead to platform compromise. CWE-89
SQL Injection 		CVE-2020-28657 2024-11-21 14:23 2021-03-3 Show GitHub Exploit DB Packet Storm
200259 5.9 MEDIUM
Network 		saltstack
fedoraproject
debian 		salt
fedora
debian_linux 		In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate. CWE-295
Improper Certificate Validation  		CVE-2020-28972 2024-11-21 14:23 2021-02-27 Show GitHub Exploit DB Packet Storm
200260 7.8 HIGH
Local 		owncloud owncloud_desktop_client ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were present. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-28646 2024-11-21 14:23 2021-02-27 Show GitHub Exploit DB Packet Storm