Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227241 7.5 危険 webbdomain - WEBBDOMAIN Polls の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6625 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
227242 7.5 危険 webbdomain - WEBBDOMAIN Petition の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6624 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
227243 7.5 危険 webbdomain - WEBBDOMAIN Post Card の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6623 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
227244 7.5 危険 webbdomian - WEBBDOMAIN Post Card の choosecard.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6622 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
227245 6.8 警告 sitexs cms - SiteXS CMS の adm/visual/upload.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6617 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
227246 4.3 警告 Zen Cart - Zen Software Zen Cart の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6616 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
227247 7.5 危険 Zen Cart - Zen Software Zen Cart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6615 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
227248 10 危険 picoflat - PicoFlat CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6604 2012-12-20 19:10 2009-04-4 Show GitHub Exploit DB Packet Storm
227249 10 危険 stadtaus - Download Center Lite における脆弱性 CWE-noinfo
情報不足 		CVE-2008-6602 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
227250 4.3 警告 xmlportal - XMLPortal の検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6600 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196201 4.9 MEDIUM
Network 		isc
fedoraproject
opensuse
debian
canonical
netapp 		bind
fedora
leap
debian_linux
ubuntu_linux
steelstore_cloud_integrated_storage 		In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative s… CWE-404
 Improper Resource Shutdown or Release 		CVE-2020-8619 2024-11-21 14:39 2020-06-18 Show GitHub Exploit DB Packet Storm
196202 6.5 MEDIUM
Network 		open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows SSRF. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8544 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
196203 7.5 HIGH
Network 		open-xchange open-xchange_appsuite OX App Suite through 7.10.3 has Improper Input Validation. CWE-20
 Improper Input Validation  		CVE-2020-8543 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
196204 5.4 MEDIUM
Network 		open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows XSS. CWE-79
Cross-site Scripting 		CVE-2020-8542 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
196205 6.8 MEDIUM
Network 		huawei p30_firmware
p30_pro_firmware
tony-al00b_firmware 		HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper … CWE-287
Improper Authentication 		CVE-2020-9076 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
196206 6.5 MEDIUM
Network 		huawei secospace_usg6300_firmware
secospace_usg6600_firmware
usg6300e_firmware 		Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification… CWE-20
 Improper Input Validation  		CVE-2020-9075 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
196207 6.8 MEDIUM
Physics 		intel innovation_engine_firmware Insufficient control flow management in firmware build and signing tool for Intel(R) Innovation Engine before version 1.0.859 may allow an unauthenticated user to potentially enable escalation of pri… NVD-CWE-noinfo
CVE-2020-8675 2024-11-21 14:39 2020-06-15 Show GitHub Exploit DB Packet Storm
196208 5.3 MEDIUM
Network 		intel active_management_technology_firmware
service_manager 		Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable informa… CWE-125
Out-of-bounds Read 		CVE-2020-8674 2024-11-21 14:39 2020-06-15 Show GitHub Exploit DB Packet Storm
196209 5.4 MEDIUM
Network 		openbrowser_project openbrowser OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.[a link that opens another app in the browser can be manipulated] CWE-276
Incorrect Default Permissions  		CVE-2020-8954 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
196210 8.8 HIGH
Network 		couchbase couchbase_server In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request. CWE-352
 Origin Validation Error 		CVE-2020-9042 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm