Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 12:06 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227851 7.5 危険 webportal - WebPortal CMS の download.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4345 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
227852 6 警告 vacilanda - Drupal 用の Brilliant Gallery モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4338 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
227853 7.5 危険 phpocs - phpOCS の library/pagefunctions.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4331 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
227854 5.8 警告 ViewVC - ViewVC の lib/viewvc.py におけるブラウザにコンテンツを誤って解釈させる脆弱性 CWE-noinfo
情報不足 		CVE-2008-4325 2012-12-20 18:52 2008-06-4 Show GitHub Exploit DB Packet Storm
227855 10 危険 project-observer - Observer における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4318 2012-12-20 18:52 2008-09-29 Show GitHub Exploit DB Packet Storm
227856 9 危険 phpCollab - phpCollab の installation/setup.php における include/settings.php に任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4305 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227857 10 危険 phpCollab - phpCollab の general/login.php における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2008-4304 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227858 6.8 警告 phpCollab - phpCollab における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4303 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227859 6.5 警告 rianxosencabos cms - Rianxosencabos CMS の Admin Control Panel におけるユーザの権限を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4245 2012-12-20 18:52 2008-09-25 Show GitHub Exploit DB Packet Storm
227860 7.5 危険 webcms - webCMS Portal Edition の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4185 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195991 7.2 HIGH
Network 		red-gate sql_monitor Red Gate SQL Monitor 9.0.13 through 9.2.14 allows an administrative user to perform a SQL injection attack by configuring the SNMP alert settings in the UI. This is fixed in 9.2.15. CWE-89
SQL Injection 		CVE-2020-9318 2024-11-21 14:40 2020-02-21 Show GitHub Exploit DB Packet Storm
195992 7.5 HIGH
Network 		golang
debian 		package_ssh
debian_linux 		golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accept… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-9283 2024-11-21 14:40 2020-02-21 Show GitHub Exploit DB Packet Storm
195993 8.8 HIGH
Network 		proftpd
debian
fedoraproject
opensuse
siemens 		proftpd
debian_linux
fedora
leap
backports_sle
simatic_net_cp_1545-1_firmware
simatic_net_cp_1543-1_firmware 		In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution. CWE-416
 Use After Free 		CVE-2020-9273 2024-11-21 14:40 2020-02-21 Show GitHub Exploit DB Packet Storm
195994 7.5 HIGH
Network 		proftpd
siemens
opensuse 		proftpd
simatic_net_cp_1543-1_firmware
simatic_net_cp_1545-1_firmware
leap
backports_sle 		ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function. CWE-125
Out-of-bounds Read 		CVE-2020-9272 2024-11-21 14:40 2020-02-21 Show GitHub Exploit DB Packet Storm
195995 8.8 HIGH
Network 		libarchive
canonical
fedoraproject 		libarchive
ubuntu_linux
fedora 		archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unsp… CWE-787
 Out-of-bounds Write 		CVE-2020-9308 2024-11-21 14:40 2020-02-20 Show GitHub Exploit DB Packet Storm
195996 6.5 MEDIUM
Network 		icehrm icehrm ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php. CWE-352
 Origin Validation Error 		CVE-2020-9271 2024-11-21 14:40 2020-02-19 Show GitHub Exploit DB Packet Storm
195997 8.8 HIGH
Network 		icehrm icehrm ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php. CWE-352
 Origin Validation Error 		CVE-2020-9270 2024-11-21 14:40 2020-02-19 Show GitHub Exploit DB Packet Storm
195998 7.2 HIGH
Network 		soplanning soplanning SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.php. CWE-89
SQL Injection 		CVE-2020-9269 2024-11-21 14:40 2020-02-19 Show GitHub Exploit DB Packet Storm
195999 7.5 HIGH
Network 		soplanning soplanning SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_createur&by= substring. CWE-89
SQL Injection 		CVE-2020-9268 2024-11-21 14:40 2020-02-19 Show GitHub Exploit DB Packet Storm
196000 6.5 MEDIUM
Network 		soplanning soplanning SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php. CWE-352
 Origin Validation Error 		CVE-2020-9267 2024-11-21 14:40 2020-02-19 Show GitHub Exploit DB Packet Storm