Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228251 5 警告 unica - Unica Affinium Campaign のリスナーサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7094 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
228252 6.8 警告 unica - Unica Affinium Campaign におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7093 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
228253 4.3 警告 unica - Unica Affinium Campaign におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7092 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
228254 7.5 危険 Pligg - Pligg における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7091 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
228255 7.8 危険 Pligg - Pligg におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7090 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
228256 4.3 警告 Pligg - Pligg におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7089 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
228257 7.5 危険 thehockeystop - TheHockeyStop HockeySTATS Online における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7085 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
228258 7.5 危険 revou - ReVou Micro Blogging Twitter クローンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7083 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
228259 4.3 警告 Simple Machines
phpraider		 - Simple Machines phpRaider の不特定のコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7035 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
228260 7.5 危険 tigran abrahamyan - PHPEcho CMS の kernel/smarty/Smarty.class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-7034 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208801 5.9 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache operation. This vulnerability can be exploited to empty a ta… CWE-287
Improper Authentication 		CVE-2020-19888 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208802 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_description']' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenti… CWE-79
Cross-site Scripting 		CVE-2020-19887 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208803 8.1 HIGH
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu. CWE-352
 Origin Validation Error 		CVE-2020-19886 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208804 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_name']' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenticated w… CWE-79
Cross-site Scripting 		CVE-2020-19885 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208805 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function in dbhcms\mod\mod.domain.edit.php line 119. CWE-79
Cross-site Scripting 		CVE-2020-19884 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208806 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter in dbhcms\mod\mod.users.view.php line 57 for user_login, A remote authenticated with admin user can exploit this vulnerabil… CWE-79
Cross-site Scripting 		CVE-2020-19883 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208807 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menu_description' variable in dbhcms\mod\mod.menus.edit.php line 83 and in dbhcms\mod\mod.menus.view.php lin… CWE-79
Cross-site Scripting 		CVE-2020-19882 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208808 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\mod\mod.selector.php line 108 for $_GET['return_name'] parameter, A remote authenticated with admin user can e… CWE-79
Cross-site Scripting 		CVE-2020-19881 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208809 6.1 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function form 'Name' in dbhcms\types.php, A remote unauthenticated attacker can exploit this vulnerability to hijack other… CWE-79
Cross-site Scripting 		CVE-2020-19880 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208810 6.1 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $_GET['dbhcms_pid'] variable in dbhcms\page.php line 107, CWE-79
Cross-site Scripting 		CVE-2020-19879 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm