Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 12:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229891 4.3 警告 structum - InfoBiz Server の search_results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6654 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
229892 7.5 危険 wh-com - Joomla! および Mambo 用の webhosting.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6653 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
229893 8.8 危険 versalsoft - Versalsoft HTTP Image Uploader ActiveX コントロールにおける任意のファイルを削除される脆弱性 CWE-16
環境設定 		CVE-2008-6638 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
229894 7.8 危険 TYPO3 Association - TYPO3 用の wt_gallery エクステンションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6630 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
229895 4.3 警告 webbdomain - WEBBDOMAIN Multi Languages WebShop Online の detail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6629 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229896 7.5 危険 webbdomain - WEBBDOMAIN WebShop の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6627 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229897 7.5 危険 webbdomain - WEBBDOMAIN Quiz の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6626 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229898 7.5 危険 webbdomain - WEBBDOMAIN Polls の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6625 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229899 7.5 危険 webbdomain - WEBBDOMAIN Petition の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6624 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229900 7.5 危険 webbdomain - WEBBDOMAIN Post Card の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6623 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202161 5.4 MEDIUM
Network 		ninjaforms ninja_forms The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms… CWE-79
Cross-site Scripting 		CVE-2020-8594 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
202162 7.4 HIGH
Network 		istio istio An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at … CWE-20
 Improper Input Validation  		CVE-2020-8843 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
202163 9.0 CRITICAL
Network 		progess
progress 		moveit_transfer In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious input, which could allow an authenticated attacker to execut… CWE-79
Cross-site Scripting 		CVE-2020-8612 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
202164 8.8 HIGH
Network 		moxa mgate_5105-mb-eip_firmware
mgate_5105-mb-eip-t_firmware 		This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4.1. Authentication is required to exploit this vulnerability… CWE-78
OS Command  		CVE-2020-8858 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
202165 7.8 HIGH
Local 		foxitsoftware reader
phantompdf 		This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the targ… CWE-416
 Use After Free 		CVE-2020-8857 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
202166 7.8 HIGH
Local 		foxitsoftware reader
phantompdf 		This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608. User interaction is required to exploit this vulnerability in that the t… CWE-416
 Use After Free 		CVE-2020-8856 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
202167 7.8 HIGH
Local 		foxitsoftware reader
phantompdf 		This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.2947. User interaction is required to exploit this vulnerability in that the t… CWE-416
 Use After Free 		CVE-2020-8855 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
202168 7.8 HIGH
Local 		foxitsoftware reader
phantompdf 		This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the … CWE-787
 Out-of-bounds Write 		CVE-2020-8854 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
202169 7.8 HIGH
Local 		foxitsoftware reader
phantompdf 		This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the … CWE-787
 Out-of-bounds Write 		CVE-2020-8853 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
202170 3.3 LOW
Local 		foxitsoftware reader
phantompdf 		This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that … CWE-125
Out-of-bounds Read 		CVE-2020-8852 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm