Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229541	10	危険	TYPO3 Association	-	TYPO3 用の Dictionary エクステンションにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-5801	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229542	7.5	危険	TYPO3 Association	-	TYPO3 用の fsmi_people エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5800	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229543	4.3	警告	TYPO3 Association	-	TYPO3 用の Wir ber uns エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5799	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229544	7.5	危険	TYPO3 Association	-	TYPO3 用の CMS Poll system エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5798	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229545	7.5	危険	TYPO3 Association	-	TYPO3 用の advCalendar エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5797	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229546	7.5	危険	TYPO3 Association	-	TYPO3 用の eluna Page Comments エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5796	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229547	4.3	警告	TYPO3 Association	-	TYPO3 用の eluna Page Comments エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5795	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229548	6.8	警告	recly	-	Joomla! 用の clickheat コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-5793	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229549	10	危険	PrestaShop	-	PrestaShop e-Commerce Solution における脆弱性	CWE-noinfo 情報不足	CVE-2008-5791	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229550	7.5	危険	recly	-	Joomla! 用の competitions コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-5790	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215211	6.5	MEDIUM Network	nukeviet	nukeviet	modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI. The old password is not needed.	CWE-352 Origin Validation Error	CVE-2020-13157	2024-11-21 14:00	2020-06-24	Show	GitHub Exploit DB Packet Storm

215212	6.5	MEDIUM Network	nukeviet	nukeviet	modules\users\admin\add_user.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=user_add URI.	CWE-352 Origin Validation Error	CVE-2020-13156	2024-11-21 14:00	2020-06-24	Show	GitHub Exploit DB Packet Storm

215213	8.8	HIGH Network	nukeviet	nukeviet	clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=clearsystem URI.	CWE-352 Origin Validation Error	CVE-2020-13155	2024-11-21 14:00	2020-06-24	Show	GitHub Exploit DB Packet Storm

215214	9.8	CRITICAL Network	openfind	mailgates mailaudit	Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files.	CWE-77 Command Injection	CVE-2020-12782	2024-11-21 14:00	2020-06-23	Show	GitHub Exploit DB Packet Storm

215215	9.8	CRITICAL Network	articatech	artica_proxy	Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.	CWE-78 OS Command	CVE-2020-13159	2024-11-21 14:00	2020-06-23	Show	GitHub Exploit DB Packet Storm

215216	7.5	HIGH Network	articatech	artica_proxy	Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.	CWE-22 Path Traversal	CVE-2020-13158	2024-11-21 14:00	2020-06-23	Show	GitHub Exploit DB Packet Storm

215217	8.6	HIGH Local	gitlab	gitlab-vscode-extension	Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system	CWE-427 Uncontrolled Search Path Element	CVE-2020-13279	2024-11-21 14:00	2020-06-23	Show	GitHub Exploit DB Packet Storm

215218	5.3	MEDIUM Network	gitlab	gitlab	Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token	CWE-200 Information Exposure	CVE-2020-13264	2024-11-21 14:00	2020-06-20	Show	GitHub Exploit DB Packet Storm

215219	8.8	HIGH Network	gitlab	gitlab	An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perf…	CWE-863 Incorrect Authorization	CVE-2020-13263	2024-11-21 14:00	2020-06-20	Show	GitHub Exploit DB Packet Storm

215220	2.7	LOW Network	gitlab	gitlab	Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code	CWE-200 Information Exposure	CVE-2020-13261	2024-11-21 14:00	2020-06-20	Show	GitHub Exploit DB Packet Storm