Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229261 7.5 危険 pozscripts - PozScripts Classified Auctions Script の gotourl.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4755 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229262 5.8 警告 scripts-for-sites - SFS Ez Forum の forum.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4754 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229263 7.5 危険 tech logic - TlNews における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-4752 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229264 7.5 危険 uniwin - Uniwin eCart Professional における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4746 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229265 4.3 警告 uniwin - Uniwin eCart Professional の emailFriend.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4745 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229266 7.5 危険 quidascript - QuidaScript FAQ Management Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4743 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229267 4.3 警告 timetrex - TimeTrex の interface/Login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4742 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229268 5.1 警告 tinycms - TinyCMS 内の ZZ_Templater モジュール内におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4740 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229269 6.8 警告 plugspace - PlugSpace の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4739 2012-12-20 18:52 2008-10-24 Show GitHub Exploit DB Packet Storm
229270 7.5 危険 tufat - MyCard の gallery.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4738 2012-12-20 18:52 2008-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221711 7.5 HIGH
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service (memory consumption) via an outgoing webhook or a slash command int… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-20888 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm
221712 4.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding whether a user can receive intra-team posts. CWE-862
 Missing Authorization 		CVE-2019-20887 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm
221713 7.5 HIGH
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes inadvertently a system admin. CWE-269
 Improper Privilege Management 		CVE-2019-20886 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm
221714 7.5 HIGH
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt file. CWE-862
 Missing Authorization 		CVE-2019-20885 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm
221715 5.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post. NVD-CWE-noinfo
CVE-2019-20884 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm
221716 4.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. Users can pin or unpin a post. NVD-CWE-noinfo
CVE-2019-20883 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm
221717 5.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.8.0. It does not honor the domain requirement when processing a join request for an open team. CWE-276
Incorrect Default Permissions  		CVE-2019-20882 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm
221718 7.3 HIGH
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2019-20881 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm
221719 7.5 HIGH
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service (memory consumption) via OpenGraph. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-20880 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm
221720 4.3 MEDIUM
Network 		mattermost mattermost_server An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e-mail addresses do not require credential re-entry. CWE-287
Improper Authentication 		CVE-2019-20879 2024-11-21 13:39 2020-06-20 Show GitHub Exploit DB Packet Storm