Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229561 6.5 警告 xigla - Xigla Absolute Form Processor XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2762 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
229562 3.5 注意 xigla - Xigla Absolute Banner Manager XE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2761 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
229563 6.5 警告 xigla - Xigla Absolute Banner Manager XE の searchbanners.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2760 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
229564 4.3 警告 xigla - Xigla Absolute Form Processor XE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2759 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
229565 3.5 注意 xigla - Xigla Absolute News Manager XE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2758 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
229566 6.5 警告 xigla - Xigla Absolute News Manager XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2757 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
229567 4.3 警告 xigla - Xigla Absolute Control Panel XE の admin/users.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2756 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
229568 7.1 危険 サン・マイクロシステムズ - Sun Java System Calendar Server などの cshttpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2008-2749 2012-12-20 18:52 2008-06-13 Show GitHub Exploit DB Packet Storm
229569 5 警告 skulltag team - Skulltag におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-2748 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
229570 4.3 警告 vBulletin Solutions, Inc. - vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2744 2012-12-20 18:52 2008-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209371 6.1 MEDIUM
Network
zblogcn z-blogphp Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php." CWE-601
Open Redirect
CVE-2020-18268 2024-11-21 14:08 2021-06-8 Show GitHub Exploit DB Packet Storm
209372 8.8 HIGH
Network
simple-log_project simple-log Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_add_member". CWE-352
 Origin Validation Error
CVE-2020-18265 2024-11-21 14:08 2021-06-8 Show GitHub Exploit DB Packet Storm
209373 8.8 HIGH
Network
simple-log_project simple-log Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_edit_member". CWE-352
 Origin Validation Error
CVE-2020-18264 2024-11-21 14:08 2021-06-8 Show GitHub Exploit DB Packet Storm
209374 8.8 HIGH
Network
libjpeg-turbo libjpeg-turbo Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial… CWE-787
 Out-of-bounds Write
CVE-2020-17541 2024-11-21 14:08 2021-06-2 Show GitHub Exploit DB Packet Storm
209375 7.5 HIGH
Network
gnu gama A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial of service (DOS) via segment faults caused by crafted inputs. CWE-476
 NULL Pointer Dereference
CVE-2020-18395 2024-11-21 14:08 2021-05-29 Show GitHub Exploit DB Packet Storm
209376 5.5 MEDIUM
Local
cesanta mjs Stack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. CWE-674
 Uncontrolled Recursion
CVE-2020-18392 2024-11-21 14:08 2021-05-29 Show GitHub Exploit DB Packet Storm
209377 4.8 MEDIUM
Network
phpmywind phpmywind Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfg_switchshow" of component " /admin/web_config.php". CWE-79
Cross-site Scripting
CVE-2020-18230 2024-11-21 14:08 2021-05-28 Show GitHub Exploit DB Packet Storm
209378 4.8 MEDIUM
Network
phpmywind phpmywind Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfg_copyright" of component " /admin/web_config.php". CWE-79
Cross-site Scripting
CVE-2020-18229 2024-11-21 14:08 2021-05-28 Show GitHub Exploit DB Packet Storm
209379 7.4 HIGH
Network
apache fineract Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployments, a man in the middle attack could be successful. NVD-CWE-Other
CVE-2020-17514 2024-11-21 14:08 2021-05-27 Show GitHub Exploit DB Packet Storm
209380 6.1 MEDIUM
Network
typora typora Cross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute arbitrary code by injecting commands during block rendering of a mathematical formula. CWE-79
Cross-site Scripting
CVE-2020-18221 2024-11-21 14:08 2021-05-27 Show GitHub Exploit DB Packet Storm