Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228571	4.3	警告	Simple Machines	-	OpenCart の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3130	2012-12-20 18:52	2008-07-10	Show	GitHub Exploit DB Packet Storm

228572	5	警告	pivot	-	Pivot の search.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3128	2012-12-20 18:52	2008-07-10	Show	GitHub Exploit DB Packet Storm

228573	6.5	警告	Xerox	-	Xerox CWW における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3122	2012-12-20 18:52	2008-07-9	Show	GitHub Exploit DB Packet Storm

228574	4.3	警告	Xerox	-	Xerox CWW におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3121	2012-12-20 18:52	2008-07-9	Show	GitHub Exploit DB Packet Storm

228575	7.5	危険	phpmotion	-	PHPmotion の play.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3118	2012-12-20 18:52	2008-07-10	Show	GitHub Exploit DB Packet Storm

228576	6.5	警告	phpmotion	-	PHPmotion の update_profile.php における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-3117	2012-12-20 18:52	2008-07-10	Show	GitHub Exploit DB Packet Storm

228577	4.3	警告	v-webmail	-	V-webmail の redirect.php におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2008-3061	2012-12-20 18:52	2008-10-7	Show	GitHub Exploit DB Packet Storm

228578	5	警告	v-webmail	-	V-webmail における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-3060	2012-12-20 18:52	2008-10-7	Show	GitHub Exploit DB Packet Storm

228579	7.5	危険	TYPO3 Association	-	TYPO3 用の Codeon Petition エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3056	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

228580	7.5	危険	TYPO3 Association	-	TYPO3 用の Support view エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3055	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209041	9.8	CRITICAL Network	extremenetworks	aerohive_netconfig	The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP reque…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2020-16152	2024-11-21 14:06	2021-11-15	Show	GitHub Exploit DB Packet Storm

209042	6.5	MEDIUM Network	google	angle	Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page.	CWE-125 Out-of-bounds Read	CVE-2020-16048	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

209043	4.3	MEDIUM Network	fortinet	fortiadc	A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as user…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-15935	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

209044	5.4	MEDIUM Network	fortinet	forticlient_enterprise_management_server	An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via…	CWE-79 Cross-site Scripting	CVE-2020-15940	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

209045	5.4	MEDIUM Network	fortinet	forticlient_endpoint_management_server	A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete…	CWE-22 Path Traversal	CVE-2020-15941	2024-11-21 14:06	2021-10-6	Show	GitHub Exploit DB Packet Storm

209046	4.3	MEDIUM Network	fortinet	fortisandbox	An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration …	NVD-CWE-Other	CVE-2020-15939	2024-11-21 14:06	2021-09-7	Show	GitHub Exploit DB Packet Storm

209047	9.8	CRITICAL Network	govicture	pc420_firmware	Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device. This issue affects: Victure PC420…	CWE-787 Out-of-bounds Write	CVE-2020-15744	2024-11-21 14:06	2021-08-30	Show	GitHub Exploit DB Packet Storm

209048	5.9	MEDIUM Network	fehcom	s\/qmail	In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credential…	CWE-77 Command Injection	CVE-2020-15955	2024-11-21 14:06	2021-08-18	Show	GitHub Exploit DB Packet Storm

209049	6.1	MEDIUM Network	egain	chat	eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.	CWE-79 Cross-site Scripting	CVE-2020-15948	2024-11-21 14:06	2021-07-30	Show	GitHub Exploit DB Packet Storm

209050	7.5	HIGH Network	bitdefender	antivirus_plus total_security internet_security	Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security (HST…	CWE-295 Improper Certificate Validation	CVE-2020-15732	2024-11-21 14:06	2021-06-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed