Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228511 7.5 危険 phpBB - phpBB 用の Tag Board モジュールの tag_board.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6314 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
228512 7.5 危険 w3matter - W3matter RevSense の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6310 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228513 7.5 危険 w3matter - W3matter AskPert の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6309 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228514 5.1 警告 PunBB - PunBB 用の PMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6308 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228515 4.3 警告 SoftbizScripts - Softbiz Classifieds Script の signinform.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6306 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228516 7.5 危険 toursmanager - ToursManager の tourview.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6303 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228517 7.5 危険 turnkeyforms - TurnkeyForms Local Classifieds における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6302 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228518 7.5 危険 prezmo - phpBB 用の Small ShoutBox モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6301 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228519 7.5 危険 toursmanager - Tours Manager の cityview.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6289 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228520 4.3 警告 subtextproject - Subtext におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6283 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208801 5.9 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache operation. This vulnerability can be exploited to empty a ta… CWE-287
Improper Authentication 		CVE-2020-19888 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208802 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_description']' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenti… CWE-79
Cross-site Scripting 		CVE-2020-19887 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208803 8.1 HIGH
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu. CWE-352
 Origin Validation Error 		CVE-2020-19886 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208804 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_name']' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenticated w… CWE-79
Cross-site Scripting 		CVE-2020-19885 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208805 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function in dbhcms\mod\mod.domain.edit.php line 119. CWE-79
Cross-site Scripting 		CVE-2020-19884 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208806 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter in dbhcms\mod\mod.users.view.php line 57 for user_login, A remote authenticated with admin user can exploit this vulnerabil… CWE-79
Cross-site Scripting 		CVE-2020-19883 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208807 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menu_description' variable in dbhcms\mod\mod.menus.edit.php line 83 and in dbhcms\mod\mod.menus.view.php lin… CWE-79
Cross-site Scripting 		CVE-2020-19882 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208808 4.8 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\mod\mod.selector.php line 108 for $_GET['return_name'] parameter, A remote authenticated with admin user can e… CWE-79
Cross-site Scripting 		CVE-2020-19881 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208809 6.1 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function form 'Name' in dbhcms\types.php, A remote unauthenticated attacker can exploit this vulnerability to hijack other… CWE-79
Cross-site Scripting 		CVE-2020-19880 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm
208810 6.1 MEDIUM
Network 		dbhcms_project dbhcms DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $_GET['dbhcms_pid'] variable in dbhcms\page.php line 107, CWE-79
Cross-site Scripting 		CVE-2020-19879 2024-11-21 14:09 2020-08-25 Show GitHub Exploit DB Packet Storm