Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228651	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Shopping Cart Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4886	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228652	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Scrolling Text Ads Script の tr1.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4885	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228653	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Classifieds Hosting Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4884	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228654	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Blog Blaster Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4883	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228655	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Autoresponder Hosting Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4882	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228656	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Reminder Service Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4881	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

228657	10	危険	sepal	-	Sepal SPBOARD の board.cgi における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2008-4873	2012-12-20 18:52	2008-10-31	Show	GitHub Exploit DB Packet Storm

228658	7.2	危険	valgrind	-	valgrind における任意のプログラムを実行される脆弱性	CWE-Other その他	CVE-2008-4865	2012-12-20 18:52	2008-10-31	Show	GitHub Exploit DB Packet Storm

228659	6.9	警告	rPath, Inc	-	rPath 上で稼動している initscripts における任意のファイルを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2008-4832	2012-12-20 18:52	2008-11-12	Show	GitHub Exploit DB Packet Storm

228660	9.3	危険	streamripper	-	Streamripper の lib/http.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4829	2012-12-20 18:52	2008-11-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208901	6.1	MEDIUM Network	get-simple	getsimplecms	GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.	CWE-601 Open Redirect	CVE-2020-18660	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208902	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php	CWE-79 Cross-site Scripting	CVE-2020-18659	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208903	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.	CWE-79 Cross-site Scripting	CVE-2020-18658	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208904	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.	CWE-79 Cross-site Scripting	CVE-2020-18657	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208905	6.1	MEDIUM Network	wuzhicms	wuzhicms	Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php".	CWE-79 Cross-site Scripting	CVE-2020-18654	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208906	8.8	HIGH Network	juqingcms	juqingcms	Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add".	CWE-352 Origin Validation Error	CVE-2020-18648	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208907	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18647	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208908	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18646	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208909	3.3	LOW Local	zziplib_project debian fedoraproject	zziplib debian_linux fedora	Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-18442	2024-11-21 14:08	2021-06-19	Show	GitHub Exploit DB Packet Storm

208910	6.1	MEDIUM Network	zblogcn	z-blogphp	Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php."	CWE-601 Open Redirect	CVE-2020-18268	2024-11-21 14:08	2021-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed