Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229571	7.5	危険	talkback	-	TalkBack におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4346	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229572	7.5	危険	webportal	-	WebPortal CMS の download.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4345	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229573	6	警告	vacilanda	-	Drupal 用の Brilliant Gallery モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4338	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229574	7.5	危険	phpocs	-	phpOCS の library/pagefunctions.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4331	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229575	5.8	警告	ViewVC	-	ViewVC の lib/viewvc.py におけるブラウザにコンテンツを誤って解釈させる脆弱性	CWE-noinfo 情報不足	CVE-2008-4325	2012-12-20 18:52	2008-06-4	Show	GitHub Exploit DB Packet Storm

229576	10	危険	project-observer	-	Observer における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4318	2012-12-20 18:52	2008-09-29	Show	GitHub Exploit DB Packet Storm

229577	9	危険	phpCollab	-	phpCollab の installation/setup.php における include/settings.php に任意の PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2008-4305	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

229578	10	危険	phpCollab	-	phpCollab の general/login.php における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2008-4304	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

229579	6.8	警告	phpCollab	-	phpCollab における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4303	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

229580	6.5	警告	rianxosencabos cms	-	Rianxosencabos CMS の Admin Control Panel におけるユーザの権限を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-4245	2012-12-20 18:52	2008-09-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208811	4.8	MEDIUM Network	x2engine	x2crm	Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "First Name" and "Last Name" fiel…	CWE-79 Cross-site Scripting	CVE-2020-21088	2024-11-21 14:12	2021-04-14	Show	GitHub Exploit DB Packet Storm

208812	6.1	MEDIUM Network	x2engine	x2crm	Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Modul…	CWE-79 Cross-site Scripting	CVE-2020-21087	2024-11-21 14:12	2021-04-14	Show	GitHub Exploit DB Packet Storm

208813	8.8	HIGH Network	indionetworks	unibox_u50_firmware unibox_u500_firmware unibox_u1000_firmware unibox_u2500_firmware unibox_u5000_firmware	Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users, /list_byod?usertype=raduse…	CWE-352 Origin Validation Error	CVE-2020-21884	2024-11-21 14:12	2021-04-9	Show	GitHub Exploit DB Packet Storm

208814	8.8	HIGH Network	indionetworks	unibox_u50_firmware unibox_u500_firmware unibox_u1000_firmware unibox_u2500_firmware unibox_u5000_firmware	Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover.	CWE-78 OS Command	CVE-2020-21883	2024-11-21 14:12	2021-04-9	Show	GitHub Exploit DB Packet Storm

208815	4.3	MEDIUM Network	wuzhicms	wuzhicms	Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter.	CWE-22 Path Traversal	CVE-2020-21590	2024-11-21 14:12	2021-04-3	Show	GitHub Exploit DB Packet Storm

208816	5.5	MEDIUM Local	coreftp	core_ftp	Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Username editbox.	CWE-120 Classic Buffer Overflow	CVE-2020-21588	2024-11-21 14:12	2021-04-3	Show	GitHub Exploit DB Packet Storm

208817	9.8	CRITICAL Network	emlog	emlog	Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-21585	2024-11-21 14:12	2021-04-3	Show	GitHub Exploit DB Packet Storm

208818	5.4	MEDIUM Network	seeyon	g6_government_collaborative_system	Cross-Site Scripting (XSS) vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'.	CWE-79 Cross-site Scripting	CVE-2020-20545	2024-11-21 14:12	2021-03-30	Show	GitHub Exploit DB Packet Storm

208819	9.8	CRITICAL Network	inspur	clusterengine	A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server	CWE-88 Argument Injection	CVE-2020-21224	2024-11-21 14:12	2021-02-23	Show	GitHub Exploit DB Packet Storm

208820	9.8	CRITICAL Network	koa2-blog_project	koa2-blog	Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signup page.	CWE-89 SQL Injection	CVE-2020-21180	2024-11-21 14:12	2021-02-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed