Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227841 2.6 注意 Pluck CMS - Pluck におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3574 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
227842 5 警告 Pligg
PHPNUKE
- Pligg などの製品の CAPTCHA 実装における CAPTCHA テストを通過される脆弱性 CWE-189
CWE-264
CVE-2008-3573 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
227843 4.3 警告 Pligg - Pligg の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3572 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
227844 7.8 危険 Xerox - Xerox Phaser におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-3571 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
227845 7.5 危険 unak - UNAK-CMS の fckeditor/editor/filemanager/browser/default/connectors/php/connector.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-3568 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
227846 4.3 警告 ZoneO-soft - ZoneO-soft freeForum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3566 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
227847 7.5 危険 Plogger Project - Plogger における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3563 2012-12-20 18:52 2008-07-29 Show GitHub Exploit DB Packet Storm
227848 6.8 警告 powergap - Powergap Shopsystem の s03.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3561 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
227849 6.8 警告 wsnlinks - WSN Forum などの index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-3555 2012-12-20 18:52 2008-08-8 Show GitHub Exploit DB Packet Storm
227850 10 危険 サン・マイクロシステムズ - Nokia Series 40 3rd エディションデバイスにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-3553 2012-12-20 18:52 2008-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196061 8.8 HIGH
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware
Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access t… NVD-CWE-noinfo
CVE-2020-8197 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196062 4.3 MEDIUM
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware
sd-wan_wanop
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.… CWE-287
Improper Authentication
CVE-2020-8196 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196063 6.5 MEDIUM
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware
sd-wan_wanop
gateway_plug-in_for_linux
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 1… CWE-22
Path Traversal
CVE-2020-8195 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196064 6.5 MEDIUM
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware
sd-wan_wanop
Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10… CWE-94
Code Injection
CVE-2020-8194 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196065 6.5 MEDIUM
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware
sd-wan_wanop
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.… CWE-287
Improper Authentication
CVE-2020-8193 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196066 6.1 MEDIUM
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware
sd-wan_wanop
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 1… CWE-79
Cross-site Scripting
CVE-2020-8191 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196067 7.5 HIGH
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware
Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privilege escalation. CWE-281
 Improper Preservation of Permissions
CVE-2020-8190 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196068 7.5 HIGH
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack. CWE-20
 Improper Input Validation 
CVE-2020-8187 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196069 9.8 CRITICAL
Network
devcert_project devcert A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function. CWE-78
OS Command 
CVE-2020-8186 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196070 4.3 MEDIUM
Network
nextcloud contacts A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-8181 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm