Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228921	4.3	警告	woltlab	-	wBB の modcp.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-0472	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

228922	4.3	警告	phpBB	-	phpBB の privmsg.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-0471	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

228923	7.5	危険	tiger php news system	-	TPNS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0469	2012-12-20 18:34	2008-01-29	Show	GitHub Exploit DB Packet Storm

228924	5	警告	webwiz	-	Web Wiz Rich Text Edito などで使用されている Web Wiz RTE_file_browser.asp におけるディレクトリトラバーサルの脆弱性	CWE-287 不適切な認証	CVE-2008-0466	2012-12-20 18:34	2008-01-28	Show	GitHub Exploit DB Packet Storm

228925	5	警告	seagullproject.org	-	Seagull の optimizer.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0465	2012-12-20 18:34	2008-01-25	Show	GitHub Exploit DB Packet Storm

228926	6.8	警告	slaed	-	SLAED CMS の function/sources.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0458	2012-12-20 18:34	2008-01-25	Show	GitHub Exploit DB Packet Storm

228927	10	危険	シマンテック	-	Symantec Backup Exec System Recovery Manager で使用される Symantec LiveState Apache Tomcat サーバで稼動している FileUpload クラスにおける任意の JSP ファイルをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-0457	2012-12-20 18:34	2008-02-4	Show	GitHub Exploit DB Packet Storm

228928	5	警告	siteman	-	Siteman の articles.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0452	2012-12-20 18:34	2008-01-24	Show	GitHub Exploit DB Packet Storm

228929	7.5	危険	rocksalt international	-	VP-ASP Shopping Cart の paypalresult.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0449	2012-12-20 18:34	2008-01-24	Show	GitHub Exploit DB Packet Storm

228930	7.5	危険	small axe solutions	-	Small Axe Weblog の inc/linkbar.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-0442	2012-12-20 18:34	2008-01-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195991	7.2	HIGH Network	red-gate	sql_monitor	Red Gate SQL Monitor 9.0.13 through 9.2.14 allows an administrative user to perform a SQL injection attack by configuring the SNMP alert settings in the UI. This is fixed in 9.2.15.	CWE-89 SQL Injection	CVE-2020-9318	2024-11-21 14:40	2020-02-21	Show	GitHub Exploit DB Packet Storm

195992	7.5	HIGH Network	golang debian	package_ssh debian_linux	golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accept…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2020-9283	2024-11-21 14:40	2020-02-21	Show	GitHub Exploit DB Packet Storm

195993	8.8	HIGH Network	proftpd debian fedoraproject opensuse siemens	proftpd debian_linux fedora leap backports_sle simatic_net_cp_1545-1_firmware simatic_net_cp_1543-1_firmware	In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.	CWE-416 Use After Free	CVE-2020-9273	2024-11-21 14:40	2020-02-21	Show	GitHub Exploit DB Packet Storm

195994	7.5	HIGH Network	proftpd siemens opensuse	proftpd simatic_net_cp_1543-1_firmware simatic_net_cp_1545-1_firmware leap backports_sle	ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.	CWE-125 Out-of-bounds Read	CVE-2020-9272	2024-11-21 14:40	2020-02-21	Show	GitHub Exploit DB Packet Storm

195995	8.8	HIGH Network	libarchive canonical fedoraproject	libarchive ubuntu_linux fedora	archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unsp…	CWE-787 Out-of-bounds Write	CVE-2020-9308	2024-11-21 14:40	2020-02-20	Show	GitHub Exploit DB Packet Storm

195996	6.5	MEDIUM Network	icehrm	icehrm	ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.	CWE-352 Origin Validation Error	CVE-2020-9271	2024-11-21 14:40	2020-02-19	Show	GitHub Exploit DB Packet Storm

195997	8.8	HIGH Network	icehrm	icehrm	ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php.	CWE-352 Origin Validation Error	CVE-2020-9270	2024-11-21 14:40	2020-02-19	Show	GitHub Exploit DB Packet Storm

195998	7.2	HIGH Network	soplanning	soplanning	SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.php.	CWE-89 SQL Injection	CVE-2020-9269	2024-11-21 14:40	2020-02-19	Show	GitHub Exploit DB Packet Storm

195999	7.5	HIGH Network	soplanning	soplanning	SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_createur&by= substring.	CWE-89 SQL Injection	CVE-2020-9268	2024-11-21 14:40	2020-02-19	Show	GitHub Exploit DB Packet Storm

196000	6.5	MEDIUM Network	soplanning	soplanning	SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php.	CWE-352 Origin Validation Error	CVE-2020-9267	2024-11-21 14:40	2020-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed