Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228661	4.3	警告	shoutcastadmin	-	WallCity-Server Shoutcast Admin Panel におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2814	2012-12-20 18:52	2008-06-23	Show	GitHub Exploit DB Packet Storm

228662	6.8	警告	shoutcastadmin	-	WallCity-Server Shoutcast Admin Panel の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2813	2012-12-20 18:52	2008-06-23	Show	GitHub Exploit DB Packet Storm

228663	6.8	警告	シマンテック	-	Symantec Altiris Notification Server Agent の GUI における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2794	2012-12-20 18:52	2008-06-17	Show	GitHub Exploit DB Packet Storm

228664	6.4	警告	Spamdyke	-	spamdyke の smtp_filter 関数におけるオープンメールリレーとしてサーバを使用される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2784	2012-12-20 18:52	2008-06-19	Show	GitHub Exploit DB Packet Storm

228665	7.5	危険	revokesoft	-	RevokeBB の Search System における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2778	2012-12-20 18:52	2008-06-19	Show	GitHub Exploit DB Packet Storm

228666	7.5	危険	phpraider	-	Simple Machines phpRaider の authentication/smf/smf.functions.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2769	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

228667	3.5	注意	xigla	-	Xigla Poll Manager XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2768	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

228668	6.5	警告	xigla	-	Xigla Poll Manager XE の search.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2767	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

228669	4.3	警告	xigla	-	Xigla Absolute Image Gallery XE におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2766	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

228670	7.5	危険	xigla	-	Xigla Absolute Image Gallery XE の gallery.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2765	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208901	6.1	MEDIUM Network	get-simple	getsimplecms	GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.	CWE-601 Open Redirect	CVE-2020-18660	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208902	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php	CWE-79 Cross-site Scripting	CVE-2020-18659	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208903	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.	CWE-79 Cross-site Scripting	CVE-2020-18658	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208904	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.	CWE-79 Cross-site Scripting	CVE-2020-18657	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208905	6.1	MEDIUM Network	wuzhicms	wuzhicms	Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php".	CWE-79 Cross-site Scripting	CVE-2020-18654	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208906	8.8	HIGH Network	juqingcms	juqingcms	Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add".	CWE-352 Origin Validation Error	CVE-2020-18648	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208907	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18647	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208908	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18646	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208909	3.3	LOW Local	zziplib_project debian fedoraproject	zziplib debian_linux fedora	Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-18442	2024-11-21 14:08	2021-06-19	Show	GitHub Exploit DB Packet Storm

208910	6.1	MEDIUM Network	zblogcn	z-blogphp	Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php."	CWE-601 Open Redirect	CVE-2020-18268	2024-11-21 14:08	2021-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed