Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228391 7.5 危険 PreProject.com - PHP JOBWEBSITE PRO の siteadmin/forgot.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5977 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
228392 4.3 警告 PreProject.com - PHP JOBWEBSITE PRO の siteadmin/forgot.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5976 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
228393 7.5 危険 sunbyte - Sunbyte e-Flower の popupproduct.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5969 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
228394 7.5 危険 phpicalendar - PHP iCalendar の print.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-5968 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
228395 7.5 危険 phpicalendar - PHP iCalendar の admin/index.php における任意のコンテンツを含むカレンダーファイルをアップロードされる脆弱性 CWE-287
不適切な認証
CVE-2008-5967 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
228396 4.3 警告 Tribal Ltd. - Tribiq CMS Community の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5961 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
228397 7.5 危険 Tribal Ltd. - Tribiq CMS Community の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5960 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
228398 5 警告 phpstreet - Wbstreet におけるデータベースの資格情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5956 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
228399 7.5 危険 phpstreet - Wbstreet の show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5955 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
228400 7.5 危険 tiddlywiki - ccTiddly における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-5949 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208831 6.1 MEDIUM
Network
intelliants subrion_cms Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel. CWE-79
Cross-site Scripting
CVE-2020-18325 2024-11-21 14:08 2022-03-5 Show GitHub Exploit DB Packet Storm
208832 6.1 MEDIUM
Network
intelliants subrion_cms Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template. CWE-79
Cross-site Scripting
CVE-2020-18324 2024-11-21 14:08 2022-03-5 Show GitHub Exploit DB Packet Storm
208833 7.5 HIGH
Network
sem-cms semcms The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query. CWE-89
SQL Injection
CVE-2020-18081 2024-11-21 14:08 2021-12-18 Show GitHub Exploit DB Packet Storm
208834 9.8 CRITICAL
Network
sem-cms semcms A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password. NVD-CWE-noinfo
CVE-2020-18078 2024-11-21 14:08 2021-12-18 Show GitHub Exploit DB Packet Storm
208835 7.5 HIGH
Network
ftpshell ftpshell_server A buffer overflow vulnerability in the Virtual Path Mapping component of FTPShell v6.83 allows attackers to cause a denial of service (DoS). CWE-120
Classic Buffer Overflow
CVE-2020-18077 2024-11-21 14:08 2021-12-18 Show GitHub Exploit DB Packet Storm
208836 6.1 MEDIUM
Network
synacor zimbra_collaboration_suite An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing. CWE-601
Open Redirect
CVE-2020-18985 2024-11-21 14:08 2021-12-16 Show GitHub Exploit DB Packet Storm
208837 6.1 MEDIUM
Network
synacor zimbra_collaboration_suite A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Collaboration 8.8.12 allows unauthenticated attackers to execute arbitrary web scr… CWE-79
Cross-site Scripting
CVE-2020-18984 2024-11-21 14:08 2021-12-16 Show GitHub Exploit DB Packet Storm
208838 6.1 MEDIUM
Network
zzcms zzcms Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php. CWE-79
Cross-site Scripting
CVE-2020-19042 2024-11-21 14:08 2021-12-14 Show GitHub Exploit DB Packet Storm
208839 7.5 HIGH
Network
php-cms_project php-cms PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information. CWE-89
SQL Injection
CVE-2020-18263 2024-11-21 14:08 2021-11-4 Show GitHub Exploit DB Packet Storm
208840 9.8 CRITICAL
Network
ed01-cms_project ed01-cms ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter. CWE-89
SQL Injection
CVE-2020-18262 2024-11-21 14:08 2021-11-4 Show GitHub Exploit DB Packet Storm