Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229791 7.5 危険 PreProject.com - PHP JOBWEBSITE PRO の siteadmin/forgot.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5977 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
229792 4.3 警告 PreProject.com - PHP JOBWEBSITE PRO の siteadmin/forgot.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5976 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
229793 7.5 危険 sunbyte - Sunbyte e-Flower の popupproduct.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5969 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
229794 7.5 危険 phpicalendar - PHP iCalendar の print.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5968 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
229795 7.5 危険 phpicalendar - PHP iCalendar の admin/index.php における任意のコンテンツを含むカレンダーファイルをアップロードされる脆弱性 CWE-287
不適切な認証 		CVE-2008-5967 2012-12-20 19:10 2009-01-26 Show GitHub Exploit DB Packet Storm
229796 4.3 警告 Tribal Ltd. - Tribiq CMS Community の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5961 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
229797 7.5 危険 Tribal Ltd. - Tribiq CMS Community の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5960 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
229798 5 警告 phpstreet - Wbstreet におけるデータベースの資格情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5956 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
229799 7.5 危険 phpstreet - Wbstreet の show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5955 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
229800 7.5 危険 tiddlywiki - ccTiddly における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5949 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202011 9.8 CRITICAL
Network 		sage adxadmin Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While explo… CWE-290
 Authentication Bypass by Spoofing 		CVE-2020-7388 2024-11-21 14:37 2021-07-23 Show GitHub Exploit DB Packet Storm
202012 5.3 MEDIUM
Network 		sage adxadmin Sage X3 Installation Pathname Disclosure. A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. Note that this vulner… NVD-CWE-noinfo
CVE-2020-7387 2024-11-21 14:37 2021-07-23 Show GitHub Exploit DB Packet Storm
202013 9.8 CRITICAL
Network 		tobesoft xplatform When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation CWE-20
 Improper Input Validation  		CVE-2020-7866 2024-11-21 14:37 2021-07-20 Show GitHub Exploit DB Packet Storm
202014 7.8 HIGH
Local 		hmtalk daviewindy DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers could exploit this a… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-7872 2024-11-21 14:37 2021-07-12 Show GitHub Exploit DB Packet Storm
202015 7.2 HIGH
Network 		unidocs ezpdf_reader
ezpdf_editor 		A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to insufficient validation of the parameter. CWE-787
 Out-of-bounds Write 		CVE-2020-7870 2024-11-21 14:37 2021-06-29 Show GitHub Exploit DB Packet Storm
202016 8.8 HIGH
Network 		mastersoft zook An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to c… CWE-20
 Improper Input Validation  		CVE-2020-7869 2024-11-21 14:37 2021-06-29 Show GitHub Exploit DB Packet Storm
202017 9.8 CRITICAL
Network 		helpu helpu A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of parameter of ShellExecutionExA function used for login. NVD-CWE-Other
CVE-2020-7868 2024-11-21 14:37 2021-06-29 Show GitHub Exploit DB Packet Storm
202018 9.8 CRITICAL
Network 		cnesty helpcom A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of the parameter. This issue affects: Cnesty … CWE-20
 Improper Input Validation  		CVE-2020-7871 2024-11-21 14:37 2021-06-29 Show GitHub Exploit DB Packet Storm
202019 8.8 HIGH
Network 		helpu helpuviewer
helpuserver
helpuftclient
helpuftserver 		A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santizatio… CWE-20
 Improper Input Validation  		CVE-2020-7862 2024-11-21 14:37 2021-06-24 Show GitHub Exploit DB Packet Storm
202020 9.8 CRITICAL
Network 		dext5 dext5_editor Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: Raonwiz DEXT5Editor versions prior to 3.5.1405747.1100.03. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-7864 2024-11-21 14:37 2021-06-16 Show GitHub Exploit DB Packet Storm