Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229921	6.8	警告	Realtek Semiconductor Corp	-	Windows Vista 上で稼動している Realtek HD Audio Codec Drivers RTKVHDA.sys および RTKVHDA64.sys におけるレジストリキーを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1931	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

229922	7.5	危険	WordPress.org	-	WordPress のクッキー認証メソッドにおけるクッキーを偽造される脆弱性	CWE-287 不適切な認証	CVE-2008-1930	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

229923	3.5	注意	The phpMyAdmin Project	-	phpMyAdmin における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2008-1924	2012-12-20 18:52	2008-04-22	Show	GitHub Exploit DB Packet Storm

229924	10	危険	sarg	-	Sarg におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1922	2012-12-20 18:52	2008-05-13	Show	GitHub Exploit DB Packet Storm

229925	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Apartment Search Script の listtest.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1919	2012-12-20 18:52	2008-04-23	Show	GitHub Exploit DB Packet Storm

229926	6	警告	PHP-Fusion	-	PHP-Fusion の submit.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1918	2012-12-20 18:52	2008-04-23	Show	GitHub Exploit DB Packet Storm

229927	7.5	危険	w2b	-	W2B Online Banking の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1893	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

229928	5	警告	Ruby-lang.org	-	Ruby の WEBrick におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1891	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

229929	7.5	危険	xplodphp	-	XplodPHP AutoTutorials の viewcat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1889	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

229930	5	警告	wikepage	-	Wikepage Opus の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1884	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209561	6.1	MEDIUM Network	sir	gnuboard	Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the url parameter to bbs/login.php.	CWE-79 Cross-site Scripting	CVE-2020-18661	2024-11-21 14:08	2021-06-25	Show	GitHub Exploit DB Packet Storm

209562	6.1	MEDIUM Network	get-simple	getsimplecms	GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.	CWE-601 Open Redirect	CVE-2020-18660	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

209563	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php	CWE-79 Cross-site Scripting	CVE-2020-18659	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

209564	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.	CWE-79 Cross-site Scripting	CVE-2020-18658	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

209565	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.	CWE-79 Cross-site Scripting	CVE-2020-18657	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

209566	6.1	MEDIUM Network	wuzhicms	wuzhicms	Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php".	CWE-79 Cross-site Scripting	CVE-2020-18654	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

209567	8.8	HIGH Network	juqingcms	juqingcms	Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add".	CWE-352 Origin Validation Error	CVE-2020-18648	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

209568	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18647	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

209569	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18646	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

209570	3.3	LOW Local	zziplib_project debian fedoraproject	zziplib debian_linux fedora	Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-18442	2024-11-21 14:08	2021-06-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed