Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229291	7.5	危険	turnkey web tools	-	Turnkey PHP Live Helper の globalsoff.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-3764	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

229292	6.8	警告	turnkey web tools	-	Turnkey PHP Live Helper の libsecure.php における db config ファイルに関連する任意の変数を上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-3763	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

229293	7.5	危険	turnkey web tools	-	Turnkey PHP Live Helper の onlinestatus_html.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3762	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

229294	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Forced Matrix Script の tr1.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3757	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

229295	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Viral Marketing Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3756	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

229296	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Classifieds Script の view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3755	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

229297	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Stylish Text Ads Script の trl.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3754	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

229298	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Programs Rating Script の details.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3753	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

229299	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Ad-Exchange Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3752	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

229300	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Short Url & Url Tracker Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3751	2012-12-20 18:52	2008-08-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221931	6.1	MEDIUM Network	cththemes	citybook easybook townhub	The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.	CWE-79 Cross-site Scripting	CVE-2019-20210	2024-11-21 13:38	2020-01-14	Show	GitHub Exploit DB Packet Storm

221932	7.5	HIGH Network	cththemes	citybook easybook townhub	The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/p…	CWE-79 CWE-639 Cross-site Scripting Authorization Bypass Through User-Controlled Key	CVE-2019-20209	2024-11-21 13:38	2020-01-14	Show	GitHub Exploit DB Packet Storm

221933	6.1	MEDIUM Network	tophub	toplist	TopList before 2019-09-03 allows XSS via a title.	CWE-79 Cross-site Scripting	CVE-2019-20377	2024-11-21 13:38	2020-01-11	Show	GitHub Exploit DB Packet Storm

221934	6.1	MEDIUM Network	ganglia	ganglia-web	ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.	CWE-79 Cross-site Scripting	CVE-2019-20379	2024-11-21 13:38	2020-01-11	Show	GitHub Exploit DB Packet Storm

221935	6.1	MEDIUM Network	ganglia	ganglia-web	ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.	CWE-79 Cross-site Scripting	CVE-2019-20378	2024-11-21 13:38	2020-01-11	Show	GitHub Exploit DB Packet Storm

221936	6.1	MEDIUM Network	psi	electronic_logbook	A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG document to elogd.c.	CWE-79 Cross-site Scripting	CVE-2019-20376	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

221937	6.1	MEDIUM Network	psi	electronic_logbook	A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows remote attackers to inject arbitrary web script or HTML via the value parameter in a localization (loc) command to…	CWE-79 Cross-site Scripting	CVE-2019-20375	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

221938	9.6	CRITICAL Network	typora	typora	A mutation cross-site scripting (XSS) issue in Typora through 0.9.9.31.2 on macOS and through 0.9.81 on Linux leads to Remote Code Execution through Mermaid code blocks. To exploit this vulnerability…	CWE-79 Cross-site Scripting	CVE-2019-20374	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

221939	7.8	HIGH Local	debian ltsp	debian_linux ldm	LTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. This is related to a run-x-…	NVD-CWE-noinfo	CVE-2019-20373	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

221940	7.8	HIGH Local	keepass	keepass	KeePass 2.4.1 allows CSV injection in the title field of a CSV export.	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2019-20184	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed