Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229291 7.5 危険 wh-com - Joomla! および Mambo 用の webhosting.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6653 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
229292 8.8 危険 versalsoft - Versalsoft HTTP Image Uploader ActiveX コントロールにおける任意のファイルを削除される脆弱性 CWE-16
環境設定 		CVE-2008-6638 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
229293 7.8 危険 TYPO3 Association - TYPO3 用の wt_gallery エクステンションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6630 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
229294 4.3 警告 webbdomain - WEBBDOMAIN Multi Languages WebShop Online の detail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6629 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229295 7.5 危険 webbdomain - WEBBDOMAIN WebShop の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6627 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229296 7.5 危険 webbdomain - WEBBDOMAIN Quiz の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6626 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229297 7.5 危険 webbdomain - WEBBDOMAIN Polls の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6625 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229298 7.5 危険 webbdomain - WEBBDOMAIN Petition の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6624 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229299 7.5 危険 webbdomain - WEBBDOMAIN Post Card の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6623 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229300 7.5 危険 webbdomian - WEBBDOMAIN Post Card の choosecard.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6622 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208581 6.1 MEDIUM
Network 		spiceworks spiceworks Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages. CWE-601
Open Redirect 		CVE-2020-25901 2024-11-21 14:18 2020-12-19 Show GitHub Exploit DB Packet Storm
208582 6.1 MEDIUM
Network 		xinuos openserver A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section'. CWE-79
Cross-site Scripting 		CVE-2020-25495 2024-11-21 14:18 2020-12-19 Show GitHub Exploit DB Packet Storm
208583 9.8 CRITICAL
Network 		xinuos openserver Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook. CWE-78
OS Command  		CVE-2020-25494 2024-11-21 14:18 2020-12-19 Show GitHub Exploit DB Packet Storm
208584 4.9 MEDIUM
Network 		mitel micollab The NuPoint Messenger of Mitel MiCollab before 9.2 could allow an attacker with escalated privilege to access user files due to insufficient access control. Successful exploit could potentially allow… NVD-CWE-noinfo
CVE-2020-25612 2024-11-21 14:18 2020-12-18 Show GitHub Exploit DB Packet Storm
208585 6.1 MEDIUM
Network 		mitel micollab The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending arbitrary code due to improper input validation, aka XSS. Successful exploitati… CWE-79
CWE-20
Cross-site Scripting
 Improper Input Validation  		CVE-2020-25611 2024-11-21 14:18 2020-12-18 Show GitHub Exploit DB Packet Storm
208586 5.3 MEDIUM
Network 		mitel micollab The AWV component of Mitel MiCollab before 9.2 could allow an attacker to gain access to a web conference due to insufficient access control for conference codes. NVD-CWE-noinfo
CVE-2020-25610 2024-11-21 14:18 2020-12-18 Show GitHub Exploit DB Packet Storm
208587 5.4 MEDIUM
Network 		mitel micollab The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could … CWE-79
Cross-site Scripting 		CVE-2020-25609 2024-11-21 14:18 2020-12-18 Show GitHub Exploit DB Packet Storm
208588 7.2 HIGH
Network 		mitel micollab The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection. CWE-20
CWE-89
 Improper Input Validation 
SQL Injection 		CVE-2020-25608 2024-11-21 14:18 2020-12-18 Show GitHub Exploit DB Packet Storm
208589 6.1 MEDIUM
Network 		mitel micollab The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS. CWE-79
CWE-20
Cross-site Scripting
 Improper Input Validation  		CVE-2020-25606 2024-11-21 14:18 2020-12-18 Show GitHub Exploit DB Packet Storm
208590 8.8 HIGH
Network 		solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF. CWE-352
 Origin Validation Error 		CVE-2020-25622 2024-11-21 14:18 2020-12-17 Show GitHub Exploit DB Packet Storm