Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229831 7.5 危険 socialgroupie - Social Groupie の group_index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6358 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
229832 5 警告 the net guys - The Net Guys ASPired2Protect におけるユーザ名などを含むデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6355 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
229833 5 警告 the net guys - The Net Guys ASPired2poll におけるユーザ名などを含むデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6354 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
229834 7.5 危険 xpoze - Xpoze Pro の home.html における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6352 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
229835 4.3 警告 turnkeyforms - TurnkeyForms Local Classifieds の listtest.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6351 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
229836 7.5 危険 turnkeyforms - TurnkeyForms Local Classifieds の listtest.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6350 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
229837 7.5 危険 turnkeyforms - TurnkeyForms Business Survey Pro の survey_results_text.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6349 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
229838 4.3 警告 ticklespace - Drupal 用の Answers モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6413 2012-12-20 19:10 2008-09-18 Show GitHub Exploit DB Packet Storm
229839 4.3 警告 sadi samami - Multi Languages WebShop Online の detail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6267 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
229840 6.8 警告 xt:Commerce - xt:Commerce における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6304 2012-12-20 19:10 2008-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202181 7.8 HIGH
Local 		lenovo pcmanager A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute code with elevated privileges. CWE-269
 Improper Privilege Management 		CVE-2020-8351 2024-11-21 14:38 2020-12-1 Show GitHub Exploit DB Packet Storm
202182 6.5 MEDIUM
Network 		mongodb ops_manager Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. This issue affects MongoDB Ops Manager v4.2 version… NVD-CWE-noinfo
CVE-2020-7927 2024-11-21 14:38 2020-11-24 Show GitHub Exploit DB Packet Storm
202183 6.5 MEDIUM
Network 		mongodb mongodb A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4… NVD-CWE-Other
CVE-2020-7928 2024-11-21 14:38 2020-11-24 Show GitHub Exploit DB Packet Storm
202184 6.5 MEDIUM
Network 		mongodb mongodb A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoD… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-7926 2024-11-21 14:38 2020-11-24 Show GitHub Exploit DB Packet Storm
202185 7.5 HIGH
Network 		mongodb mongodb Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service… CWE-20
 Improper Input Validation  		CVE-2020-7925 2024-11-21 14:38 2020-11-24 Show GitHub Exploit DB Packet Storm
202186 7.4 HIGH
Network 		nextcloud social Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack. CWE-295
Improper Certificate Validation  		CVE-2020-8279 2024-11-21 14:38 2020-11-19 Show GitHub Exploit DB Packet Storm
202187 5.3 MEDIUM
Network 		nextcloud social Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user. CWE-863
 Incorrect Authorization 		CVE-2020-8278 2024-11-21 14:38 2020-11-19 Show GitHub Exploit DB Packet Storm
202188 7.5 HIGH
Network 		nodejs
fedoraproject
oracle
c-ares_project 		node.js
fedora
graalvm
retail_xstore_point_of_service
jd_edwards_enterpriseone_tools
mysql_cluster
blockchain_platform
c-ares 		A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the appli… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-8277 2024-11-21 14:38 2020-11-19 Show GitHub Exploit DB Packet Storm
202189 8.8 HIGH
Network 		citrix sd-wan Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8. CWE-78
OS Command  		CVE-2020-8273 2024-11-21 14:38 2020-11-16 Show GitHub Exploit DB Packet Storm
202190 7.5 HIGH
Network 		citrix sd-wan Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8 CWE-287
Improper Authentication 		CVE-2020-8272 2024-11-21 14:38 2020-11-16 Show GitHub Exploit DB Packet Storm