Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229551	7.5	危険	v3chat	-	V3 Chat Live Support の admin/index.php における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-5783	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229552	7.5	危険	zeeways	-	ZeeMatri の bannerclick.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5782	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

229553	7.5	危険	phpweather	-	PHP Weather の test.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5771	2012-12-20 19:10	2008-12-30	Show	GitHub Exploit DB Packet Storm

229554	4.3	警告	phpweather	-	PHP Weather の config/make_config.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5770	2012-12-20 19:10	2008-12-30	Show	GitHub Exploit DB Packet Storm

229555	7.5	危険	sirium	-	XOOPS 用の AM Events モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5768	2012-12-20 19:10	2008-12-30	Show	GitHub Exploit DB Packet Storm

229556	6.8	警告	phparanoid	-	PHParanoid におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-5758	2012-12-20 19:10	2008-12-30	Show	GitHub Exploit DB Packet Storm

229557	3.5	注意	Textpattern	-	Textpattern の textarea/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5757	2012-12-20 19:10	2008-12-30	Show	GitHub Exploit DB Packet Storm

229558	4.3	警告	WordPress.org	-	WordPress 用の Page Flip Image Gallery プラグインにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5752	2012-12-20 19:10	2008-12-30	Show	GitHub Exploit DB Packet Storm

229559	7.5	危険	Pligg	-	Pligg CMS の evb/check_url.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5739	2012-12-20 19:10	2008-12-26	Show	GitHub Exploit DB Packet Storm

229560	7.5	危険	PHP-Fusion	-	PHP-Fusion 用の Team Impact TI Blog System モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5733	2012-12-20 19:10	2008-12-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208721	7.8	HIGH Local	fujielectric	v-server	The affected Fuji Electric V-Server Lite versions prior to 3.3.24.0 are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.	CWE-787 Out-of-bounds Write	CVE-2020-25171	2024-11-21 14:17	2021-02-20	Show	GitHub Exploit DB Packet Storm

208722	5.5	MEDIUM Local	nfstream	nfstream	An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being used after it is created, it will cause a…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-25340	2024-11-21 14:17	2021-02-17	Show	GitHub Exploit DB Packet Storm

208723	7.8	HIGH Local	siemens	digsi_4	A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users. As these folders are included in the search for dlls, an a…	-	CVE-2020-25245	2024-11-21 14:17	2021-02-10	Show	GitHub Exploit DB Packet Storm

208724	7.8	HIGH Local	siemens	totally_integrated_automation_portal simatic_process_control_system_neo	A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16). Manipulating certain files in specific folders could allow a local atta…	CWE-427 Uncontrolled Search Path Element	CVE-2020-25238	2024-11-21 14:17	2021-02-10	Show	GitHub Exploit DB Packet Storm

208725	8.1	HIGH Network	siemens	sinec_network_management_system sinema_server	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When uploading files to an affected system using a zip containe…	-	CVE-2020-25237	2024-11-21 14:17	2021-02-10	Show	GitHub Exploit DB Packet Storm

208726	5.3	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.	CWE-276 Incorrect Default Permissions	CVE-2020-25208	2024-11-21 14:17	2021-02-4	Show	GitHub Exploit DB Packet Storm

208727	7.8	HIGH Local	reolink	rln8-410_firmware rlc-422_firmware rlc-510a_firmware rlc-423s_firmware rlc-423_firmware rlc-410_firmware rlc-520a_firmware	An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access	CWE-798 Use of Hard-coded Credentials	CVE-2020-25173	2024-11-21 14:17	2021-01-27	Show	GitHub Exploit DB Packet Storm

208728	7.5	HIGH Network	reolink	rln8-410_firmware rlc-422_firmware rlc-510a_firmware rlc-410_firmware rlc-423s_firmware rlc-423_firmware rlc-520a_firmware	The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-25169	2024-11-21 14:17	2021-01-27	Show	GitHub Exploit DB Packet Storm

208729	6.1	MEDIUM Network	nagios	log_server	Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver/configure/create_snapshot through the snapshot_name parameter, which may impact users who open a malici…	CWE-79 Cross-site Scripting	CVE-2020-25385	2024-11-21 14:17	2021-01-20	Show	GitHub Exploit DB Packet Storm

208730	9.8	CRITICAL Network	siemens	scalance_x200-4pirt_firmware scalance_x201-3pirt_firmware scalance_x202-2irt_firmware scalance_x202-2pirt_firmware scalance_x202-2pirt_siplus_net_firmware scalance_x204irt_firmware …	A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5…	-	CVE-2020-25226	2024-11-21 14:17	2021-01-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed