Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227651	2.1	注意	sarab	-	SaraB の sarab.sh スクリプトにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-2517	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

227652	5	警告	シマンテック	-	Symantec Backup Exec System Recovery Manager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2512	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

227653	7.5	危険	WordPress.org	-	WordPress 用 Upload File プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2510	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

227654	4.3	警告	tr script news	-	Tr Script News の news.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2508	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

227655	7.5	危険	simpel side	-	Simpel Side Weblosning における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2506	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

227656	4.3	警告	simpel side	-	Simpel Side Weblosning の result.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2505	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

227657	7.5	危険	simpel side	-	Simpel Side Netbutik における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2504	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

227658	9.3	危険	加藤和良	-	eMule X-Ray の Uploadlist におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-2503	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

227659	4.3	警告	quate	-	Quate CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2496	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

227660	4.3	警告	TYPO3 Association	-	TYPO3 用の KJ Image Lightbox 2 エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2490	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209941	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mec…	CWE-668 CWE-276 Exposure of Resource to Wrong Sphere Incorrect Default Permissions	CVE-2020-13240	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

209942	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS.	CWE-79 Cross-site Scripting	CVE-2020-13239	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

209943	6.5	MEDIUM Network	cacti fedoraproject	cacti fedora	In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.	CWE-352 Origin Validation Error	CVE-2020-13231	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209944	4.3	MEDIUM Network	cacti debian fedoraproject	cacti debian_linux fedora	In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs).	CWE-281 Improper Preservation of Permissions	CVE-2020-13230	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209945	5.5	MEDIUM Local	kde	amarok	A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time,…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-13152	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209946	9.8	CRITICAL Network	smartbear	readyapi	An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into th…	CWE-502 Deserialization of Untrusted Data	CVE-2020-12835	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209947	9.8	CRITICAL Network	wso2	api_manager	WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-13226	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209948	4.8	MEDIUM Network	phpipam	phpipam	phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget.	CWE-79 Cross-site Scripting	CVE-2020-13225	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209949	7.5	HIGH Network	wireshark debian opensuse fedoraproject	wireshark debian_linux leap fedora	In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a c…	CWE-674 Uncontrolled Recursion	CVE-2020-13164	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209950	7.4	HIGH Network	em-imap_project	em-imap	em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is no…	CWE-295 Improper Certificate Validation	CVE-2020-13163	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed