Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229801	6.8	警告	phpprobid	-	PHP Pro Bid の includes/class_image.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-0970	2012-12-20 19:10	2009-03-19	Show	GitHub Exploit DB Packet Storm

229802	6.8	警告	Moxi9	-	phpFoX の account/settings/account/index.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-0969	2012-12-20 19:10	2009-03-19	Show	GitHub Exploit DB Packet Storm

229803	4	警告	Rhino Software	-	Serv-U の FTP サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-0967	2012-12-20 19:10	2009-03-19	Show	GitHub Exploit DB Packet Storm

229804	7.5	危険	YABSoft	-	YABSoft Mega File Hosting の cross.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-0966	2012-12-20 19:10	2009-03-19	Show	GitHub Exploit DB Packet Storm

229805	5	警告	xlinesoft	-	PHPRunner の UserView_list.php における権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2009-0964	2012-12-20 19:10	2009-03-19	Show	GitHub Exploit DB Packet Storm

229806	7.5	危険	xlinesoft	-	PHPRunner における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0963	2012-12-20 19:10	2009-03-19	Show	GitHub Exploit DB Packet Storm

229807	10	危険	The Tor Project	-	Tor における脆弱性	CWE-noinfo 情報不足	CVE-2009-0939	2012-12-20 19:10	2009-03-17	Show	GitHub Exploit DB Packet Storm

229808	5	警告	The Tor Project	-	Tor におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-0938	2012-12-20 19:10	2009-03-17	Show	GitHub Exploit DB Packet Storm

229809	5	警告	The Tor Project	-	Tor におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-0937	2012-12-20 19:10	2009-03-17	Show	GitHub Exploit DB Packet Storm

229810	5	警告	The Tor Project	-	Tor におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-0936	2012-12-20 19:10	2009-03-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
202261	4.9	MEDIUM Network	lenovo	xclarity_administrator	An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-8355	2024-11-21 14:38	2021-02-11	Show	GitHub Exploit DB Packet Storm

202262	5.4	MEDIUM Network	nextcloud	nextcloud_server	A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of a stored XSS attack using Internet Explorer when saving a 'javascript:' URL in markdown format.	CWE-79 Cross-site Scripting	CVE-2020-8294	2024-11-21 14:38	2021-02-4	Show	GitHub Exploit DB Packet Storm

202263	8.8	HIGH Adjacent	adt	lifeshield_diy_hd_video_doorbell_firmware	Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of ADT LifeShield DIY HD Video Doorbell allows an attacker on the same network to e…	CWE-77 Command Injection	CVE-2020-8101	2024-11-21 14:38	2021-02-2	Show	GitHub Exploit DB Packet Storm

202264	7.5	HIGH Network	nextcloud	nextcloud_server	A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8295	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

202265	6.5	MEDIUM Network	nextcloud	nextcloud_server	A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage wi…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8293	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

202266	5.4	MEDIUM Network	rocket.chat	rocket.chat	Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.	CWE-79 Cross-site Scripting	CVE-2020-8292	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

202267	5.4	MEDIUM Network	rocket.chat	rocket.chat	The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter.	CWE-79 Cross-site Scripting	CVE-2020-8288	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

202268	6.5	MEDIUM Network	nodejs debian fedoraproject oracle siemens	node.js debian_linux fedora graalvm sinec_infrastructure_network_services	Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies th…	CWE-444 HTTP Request Smuggling	CVE-2020-8287	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

202269	5.4	MEDIUM Network	nextcloud	contacts	A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks.	CWE-79 Cross-site Scripting	CVE-2020-8281	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

202270	5.4	MEDIUM Network	nextcloud	contacts	A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to perform cross-site scripting (XSS) attacks.	CWE-79 Cross-site Scripting	CVE-2020-8280	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed