Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228721 7.5 危険 rens rikkerink - FunGamez の pages/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1487 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
228722 6.8 警告 studiolounge - index2.php から到達可能な Adam Patterson Studio Lounge Address Book における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-1483 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
228723 7.5 危険 pjhome - PJBlog3 の action.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1481 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
228724 7.5 危険 Pragyan CMS Project - index.php Pragyan CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1480 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
228725 7.5 危険 razorCMS - razorCMS における任意のページへ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1463 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
228726 7.2 危険 razorCMS - razorCMS の Security Manager における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1462 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
228727 3.5 注意 razorCMS - razorCMS の Create New Page フォームにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1461 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
228728 4.6 警告 razorCMS - razorCMS における管理者のパスワードハッシュを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1460 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
228729 6.8 警告 razorCMS - razorCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-1459 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
228730 4.3 警告 razorCMS - razorCMS の admin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1458 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208081 9.8 CRITICAL
Network 		newsscriptphp news_script_php_pro SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action. CWE-89
SQL Injection 		CVE-2020-25475 2024-11-21 14:18 2020-11-25 Show GitHub Exploit DB Packet Storm
208082 6.1 MEDIUM
Network 		newsscriptphp news_script_php_pro SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter. CWE-79
Cross-site Scripting 		CVE-2020-25474 2024-11-21 14:18 2020-11-25 Show GitHub Exploit DB Packet Storm
208083 6.5 MEDIUM
Network 		newsscriptphp news_script_php_pro SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies. NVD-CWE-Other
CVE-2020-25473 2024-11-21 14:18 2020-11-25 Show GitHub Exploit DB Packet Storm
208084 6.5 MEDIUM
Network 		newsscriptphp news_script_php_pro SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users. CWE-352
 Origin Validation Error 		CVE-2020-25472 2024-11-21 14:18 2020-11-25 Show GitHub Exploit DB Packet Storm
208085 7.5 HIGH
Network 		postgresql
debian 		postgresql
debian_linux 		A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses … - CVE-2020-25696 2024-11-21 14:18 2020-11-24 Show GitHub Exploit DB Packet Storm
208086 3.5 LOW
Adjacent 		redhat advanced_cluster_management_for_kubernetes A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned using a test certificate from the source repository. This would result in all … CWE-798
 Use of Hard-coded Credentials 		CVE-2020-25688 2024-11-21 14:18 2020-11-24 Show GitHub Exploit DB Packet Storm
208087 8.8 HIGH
Adjacent 		redhat
fedoraproject 		ceph
ceph_storage
openshift_container_platform
fedora 		A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilu… - CVE-2020-25660 2024-11-21 14:18 2020-11-24 Show GitHub Exploit DB Packet Storm
208088 5.5 MEDIUM
Local 		xpdfreader
fedoraproject 		xpdf
fedora 		In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a pr… - CVE-2020-25725 2024-11-21 14:18 2020-11-21 Show GitHub Exploit DB Packet Storm
208089 9.8 CRITICAL
Network 		microfocus identity_manager NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1. CWE-89
SQL Injection 		CVE-2020-25839 2024-11-21 14:18 2020-11-21 Show GitHub Exploit DB Packet Storm
208090 5.3 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. … CWE-200
Information Exposure 		CVE-2020-25703 2024-11-21 14:18 2020-11-20 Show GitHub Exploit DB Packet Storm