Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228591	7.5	危険	TYPO3 Association	-	TYPO3 用の News Calendar エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3044	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

228592	7.5	危険	Web-Empowered Church Team	-	TYPO3 用の WEC Discussion Forum エクステンションにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-3043	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

228593	10	危険	TYPO3 Association	-	TYPO3 用の DAM Frontend エクステンションにおける脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3042	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

228594	7.5	危険	TYPO3 Association	-	TYPO3 用の DAM Frontend エクステンションにおける脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3041	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

228595	5	警告	TYPO3 Association	-	TYPO3 用の DAM Frontend エクステンションにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-3040	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

228596	4.3	警告	Vtiger	-	vtiger CRM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3101	2012-12-20 18:52	2008-09-3	Show	GitHub Exploit DB Packet Storm

228597	6.5	警告	phplizardo	-	ImperialBB における任意の PHP コードをアップロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2008-3093	2012-12-20 18:52	2008-07-9	Show	GitHub Exploit DB Packet Storm

228598	7.5	危険	xpoze	-	Xpoze Pro の user.html における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3089	2012-12-20 18:52	2008-07-9	Show	GitHub Exploit DB Packet Storm

228599	7.5	危険	Simple Machines	-	SMF における脆弱性	CWE-noinfo 情報不足	CVE-2008-3073	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

228600	7.5	危険	Simple Machines	-	Simple Machines Forum における脆弱性	CWE-189 数値処理の問題	CVE-2008-3072	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209041	9.8	CRITICAL Network	extremenetworks	aerohive_netconfig	The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP reque…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2020-16152	2024-11-21 14:06	2021-11-15	Show	GitHub Exploit DB Packet Storm

209042	6.5	MEDIUM Network	google	angle	Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page.	CWE-125 Out-of-bounds Read	CVE-2020-16048	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

209043	4.3	MEDIUM Network	fortinet	fortiadc	A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as user…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-15935	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

209044	5.4	MEDIUM Network	fortinet	forticlient_enterprise_management_server	An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via…	CWE-79 Cross-site Scripting	CVE-2020-15940	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

209045	5.4	MEDIUM Network	fortinet	forticlient_endpoint_management_server	A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete…	CWE-22 Path Traversal	CVE-2020-15941	2024-11-21 14:06	2021-10-6	Show	GitHub Exploit DB Packet Storm

209046	4.3	MEDIUM Network	fortinet	fortisandbox	An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration …	NVD-CWE-Other	CVE-2020-15939	2024-11-21 14:06	2021-09-7	Show	GitHub Exploit DB Packet Storm

209047	9.8	CRITICAL Network	govicture	pc420_firmware	Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device. This issue affects: Victure PC420…	CWE-787 Out-of-bounds Write	CVE-2020-15744	2024-11-21 14:06	2021-08-30	Show	GitHub Exploit DB Packet Storm

209048	5.9	MEDIUM Network	fehcom	s\/qmail	In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credential…	CWE-77 Command Injection	CVE-2020-15955	2024-11-21 14:06	2021-08-18	Show	GitHub Exploit DB Packet Storm

209049	6.1	MEDIUM Network	egain	chat	eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.	CWE-79 Cross-site Scripting	CVE-2020-15948	2024-11-21 14:06	2021-07-30	Show	GitHub Exploit DB Packet Storm

209050	7.5	HIGH Network	bitdefender	antivirus_plus total_security internet_security	Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security (HST…	CWE-295 Improper Certificate Validation	CVE-2020-15732	2024-11-21 14:06	2021-06-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed