Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228801 5 警告 phpauction - phpAuction における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6999 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
228802 10 危険 シーメンス - Siemens Gigaset WLAN Camera における許可されていない操作を実行される脆弱性 CWE-310
暗号の問題 		CVE-2008-6993 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
228803 6.8 警告 Zen Cart - Zen Cart の includes/classes/shopping_cart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6986 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
228804 6.8 警告 Zen Cart - Zen Cart の includes/classes/shopping_cart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6985 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
228805 5 警告 phpadultsite - phpAdultSite CMS の index.php における SQL インジェクションの脆弱性 CWE-200
情報漏えい 		CVE-2008-6981 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
228806 7.5 危険 phpadultsite - phpAdultSite CMS の as_archives.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6980 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
228807 7.5 危険 Pligg - Pligg CMS の submit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6968 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
228808 7.5 危険 X7 Group - X7 Chat のログインページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6964 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
228809 7.5 危険 turnkeyforms - TurnkeyForms Text Link Sales の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6963 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
228810 5 警告 x10media - X10media x10 Automatic Mp3 Search Engine Script の download.php における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6960 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208601 6.1 MEDIUM
Network 		jizhicms jizhicms JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie. CWE-79
Cross-site Scripting 		CVE-2020-21228 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
208602 6.5 MEDIUM
Network 		emlog emlog emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php. NVD-CWE-noinfo
CVE-2020-21014 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
208603 7.2 HIGH
Network 		emlog emlog emlog v6.0.0 contains a SQL injection via /admin/comment.php. CWE-89
SQL Injection 		CVE-2020-21013 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
208604 9.8 CRITICAL
Network 		hotel_and_lodge_booking_management_system_project hotel_and_lodge_booking_management_system Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edi… CWE-89
SQL Injection 		CVE-2020-21012 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
208605 5.4 MEDIUM
Network 		jeecms jeecms JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter. CWE-79
Cross-site Scripting 		CVE-2020-20799 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208606 9.8 CRITICAL
Network 		flamecms_project flamecms FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php. CWE-89
SQL Injection 		CVE-2020-20797 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208607 9.8 CRITICAL
Network 		flamecms_project flamecms FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter. CWE-89
SQL Injection 		CVE-2020-20796 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208608 7.2 HIGH
Network 		tendacn ac9_firmware A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /gofo… CWE-787
 Out-of-bounds Write 		CVE-2020-20746 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208609 7.5 HIGH
Network 		rudp_project rudp rudp v0.6 was discovered to contain a memory leak in the component main.c. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-20665 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208610 6.5 MEDIUM
Network 		libiec_iccp_mod_project libiec_iccp_mod libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c. NVD-CWE-noinfo
CVE-2020-20664 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm