Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229871	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Freelance Zone の view_cresume.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4469	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229872	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Share Zone の view_news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4468	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229873	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Toner Cart の show_series_ink.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4467	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229874	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Cosmetics Zone の view_products_cat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4466	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229875	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech DVD Zone の view_mags.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4465	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229876	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Mag Zone の view_mags.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4464	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229877	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Jobs Zone の view_news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4463	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229878	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Visa Zone の view_news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4462	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229879	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Dating Zone の advanced_search_results.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4461	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229880	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech MMORPG Zone の game.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4460	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208911	8.1	HIGH Network	overwolf	overwolf	In the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint.	NVD-CWE-Other	CVE-2020-25214	2024-11-21 14:17	2020-10-17	Show	GitHub Exploit DB Packet Storm

208912	7.8	HIGH Local	laquisscada	scada	An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the privileges of the application due to an out-of-bounds read vulnerability on the…	-	CVE-2020-25188	2024-11-21 14:17	2020-10-14	Show	GitHub Exploit DB Packet Storm

208913	9.8	CRITICAL Network	online_bus_booking_system_project	online_bus_booking_system	In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.	CWE-89 SQL Injection	CVE-2020-25273	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

208914	6.1	MEDIUM Network	online_bus_booking_system_project	online_bus_booking_system	In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.	CWE-79 Cross-site Scripting	CVE-2020-25272	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

208915	5.4	MEDIUM Network	phpgurukul	hospital_management_system	PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php.	CWE-79 Cross-site Scripting	CVE-2020-25271	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

208916	5.4	MEDIUM Network	phpgurukul	hostel_management_system	PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.	CWE-79 Cross-site Scripting	CVE-2020-25270	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

208917	7.1	HIGH Network	pyrocms	pyrocms	PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.	CWE-352 Origin Validation Error	CVE-2020-25263	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

208918	4.3	MEDIUM Network	pyrocms	pyrocms	PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.	CWE-352 Origin Validation Error	CVE-2020-25262	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

208919	5.4	MEDIUM Network	getsymphony	symphony	Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php	CWE-79 Cross-site Scripting	CVE-2020-25343	2024-11-21 14:17	2020-10-7	Show	GitHub Exploit DB Packet Storm

208920	5.3	MEDIUM Network	pritunl	pritunl	Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 401. However, if the username is valid, th…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-25200	2024-11-21 14:17	2020-10-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed