Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229791 | 7.5 | 危険 | PreProject.com | - | PHP JOBWEBSITE PRO の siteadmin/forgot.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-5977 | 2012-12-20 19:10 | 2009-01-26 | Show | GitHub Exploit DB Packet Storm |
| 229792 | 4.3 | 警告 | PreProject.com | - | PHP JOBWEBSITE PRO の siteadmin/forgot.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-5976 | 2012-12-20 19:10 | 2009-01-26 | Show | GitHub Exploit DB Packet Storm |
| 229793 | 7.5 | 危険 | sunbyte | - | Sunbyte e-Flower の popupproduct.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-5969 | 2012-12-20 19:10 | 2009-01-26 | Show | GitHub Exploit DB Packet Storm |
| 229794 | 7.5 | 危険 | phpicalendar | - | PHP iCalendar の print.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-5968 | 2012-12-20 19:10 | 2009-01-26 | Show | GitHub Exploit DB Packet Storm |
| 229795 | 7.5 | 危険 | phpicalendar | - | PHP iCalendar の admin/index.php における任意のコンテンツを含むカレンダーファイルをアップロードされる脆弱性 |
CWE-287
不適切な認証 |
CVE-2008-5967 | 2012-12-20 19:10 | 2009-01-26 | Show | GitHub Exploit DB Packet Storm |
| 229796 | 4.3 | 警告 | Tribal Ltd. | - | Tribiq CMS Community の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-5961 | 2012-12-20 19:10 | 2009-01-23 | Show | GitHub Exploit DB Packet Storm |
| 229797 | 7.5 | 危険 | Tribal Ltd. | - | Tribiq CMS Community の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-5960 | 2012-12-20 19:10 | 2009-01-23 | Show | GitHub Exploit DB Packet Storm |
| 229798 | 5 | 警告 | phpstreet | - | Wbstreet におけるデータベースの資格情報を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-5956 | 2012-12-20 19:10 | 2009-01-23 | Show | GitHub Exploit DB Packet Storm |
| 229799 | 7.5 | 危険 | phpstreet | - | Wbstreet の show.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-5955 | 2012-12-20 19:10 | 2009-01-23 | Show | GitHub Exploit DB Packet Storm |
| 229800 | 7.5 | 危険 | tiddlywiki | - | ccTiddly における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-5949 | 2012-12-20 19:10 | 2009-01-23 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 4, 2026, 4:17 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 215131 | 7.5 |
HIGH
Network |
zohocorp | manageengine_servicedesk_plus | Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents. |
CWE-306
Missing Authentication for Critical Function |
CVE-2020-14048 | 2024-11-21 14:02 | 2020-06-12 | Show | GitHub Exploit DB Packet Storm |
| 215132 | 7.2 |
HIGH
Network |
pandorafms | pandora_fms | Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2020-13855 | 2024-11-21 14:02 | 2020-06-11 | Show | GitHub Exploit DB Packet Storm |
| 215133 | 9.8 |
CRITICAL
Network |
pandorafms | pandora_fms | Artica Pandora FMS 7.44 allows privilege escalation. |
CWE-269
Improper Privilege Management |
CVE-2020-13854 | 2024-11-21 14:02 | 2020-06-11 | Show | GitHub Exploit DB Packet Storm |
| 215134 | 5.4 |
MEDIUM
Network |
pandorafms | pandora_fms | Artica Pandora FMS 7.44 has persistent XSS in the Messages feature. |
CWE-79
Cross-site Scripting |
CVE-2020-13853 | 2024-11-21 14:02 | 2020-06-11 | Show | GitHub Exploit DB Packet Storm |
| 215135 | 7.2 |
HIGH
Network |
pandorafms | pandora_fms | Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2020-13852 | 2024-11-21 14:02 | 2020-06-11 | Show | GitHub Exploit DB Packet Storm |
| 215136 | 8.8 |
HIGH
Network |
pandorafms | pandora_fms | Artica Pandora FMS 7.44 allows remote command execution via the events feature. |
CWE-78
OS Command |
CVE-2020-13851 | 2024-11-21 14:02 | 2020-06-11 | Show | GitHub Exploit DB Packet Storm |
| 215137 | 7.5 |
HIGH
Network |
pandorafms | pandora_fms | Artica Pandora FMS 7.44 has inadequate access controls on a web folder. |
CWE-425
Direct Request ('Forced Browsing') |
CVE-2020-13850 | 2024-11-21 14:02 | 2020-06-11 | Show | GitHub Exploit DB Packet Storm |
| 215138 | 5.3 |
MEDIUM
Network |
citrix | xenapp | Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is ent… |
CWE-203
Information Exposure Through Discrepancy |
CVE-2020-13998 | 2024-11-21 14:02 | 2020-06-11 | Show | GitHub Exploit DB Packet Storm |
| 215139 | 9.8 |
CRITICAL
Network |
meetecho | janus | An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflow. |
CWE-787
Out-of-bounds Write |
CVE-2020-13901 | 2024-11-21 14:02 | 2020-06-11 | Show | GitHub Exploit DB Packet Storm |
| 215140 | 7.5 |
HIGH
Network |
meetecho | janus | An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference. |
CWE-476
NULL Pointer Dereference |
CVE-2020-13900 | 2024-11-21 14:02 | 2020-06-11 | Show | GitHub Exploit DB Packet Storm |