Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229911 4.3 警告 Web-Empowered Church Team - TYPO3 用の WEC Discussion Forum エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6144 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
229912 5 警告 webbiscuits - WebBiscuits Modules Controller の faqsupport/wce.download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6139 2012-12-20 19:10 2009-02-13 Show GitHub Exploit DB Packet Storm
229913 7.5 危険 webbiscuits - WebBiscuits Modules Controller の adminhead.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6138 2012-12-20 19:10 2009-02-13 Show GitHub Exploit DB Packet Storm
229914 7.5 危険 socialengine - SocialEngine における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2008-6121 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
229915 7.5 危険 socialengine - SocialEngine の profile_comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6120 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
229916 7.5 危険 pilotgroup - PG Job Site Pro の homepage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6117 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
229917 7.5 危険 prozilla - Prozilla Hosting Index の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6115 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
229918 4.3 警告 SemanticScuttle - SemanticScuttle におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6113 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
229919 5 警告 Scriptsez.net - Ez Ringtone Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6112 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
229920 10 危険 SemanticScuttle - SemanticScuttle における脆弱性 CWE-noinfo
情報不足
CVE-2008-6110 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224971 7.5 HIGH
Network
foxitsoftware phantompdf
reader
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive. CWE-200
Information Exposure
CVE-2019-20836 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224972 4.3 MEDIUM
Network
foxitsoftware phantompdf
reader
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling. NVD-CWE-noinfo
CVE-2019-20835 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224973 7.5 HIGH
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures. CWE-347
 Improper Verification of Cryptographic Signature
CVE-2019-20834 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224974 7.5 HIGH
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive. CWE-287
Improper Authentication
CVE-2019-20833 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224975 4.3 MEDIUM
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling. NVD-CWE-noinfo
CVE-2019-20832 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224976 7.5 HIGH
Network
foxitsoftware 3d An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash. NVD-CWE-Other
CVE-2019-20831 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224977 9.8 CRITICAL
Network
foxitsoftware phantompdf
reader
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used. CWE-787
 Out-of-bounds Write
CVE-2019-20830 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224978 7.5 HIGH
Network
foxitsoftware phantompdf
reader
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file. CWE-476
 NULL Pointer Dereference
CVE-2019-20829 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224979 7.5 HIGH
Network
foxitsoftware phantompdf
reader
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs. CWE-120
Classic Buffer Overflow
CVE-2019-20828 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224980 9.8 CRITICAL
Network
foxitsoftware reader
phantompdf
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space. CWE-787
 Out-of-bounds Write
CVE-2019-20827 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm