Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229921	6.5	警告	rianxosencabos cms	-	Rianxosencabos CMS の Admin Control Panel におけるユーザの権限を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-4245	2012-12-20 18:52	2008-09-25	Show	GitHub Exploit DB Packet Storm

229922	7.5	危険	webcms	-	webCMS Portal Edition の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4185	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

229923	4.3	警告	webcms	-	webCMS Portal Edition の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4184	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

229924	7.5	危険	PreProject.com	-	Pre Real Estate Listings の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4177	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

229925	7.5	危険	proarcadescript	-	ProArcadeScript における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4173	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

229926	7.5	危険	rfaah	-	Cars & Vehicle の page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4172	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

229927	4.3	警告	pro2col	-	Pro2col Stingray FTS の verify_login.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4168	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

229928	7.5	危険	zanfi solutions	-	Zanfi CMS lite および Jaw Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4159	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

229929	6.8	警告	zanfi solutions	-	Zanfi CMS lite の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4158	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

229930	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech phpVID の groups.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4157	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214781	9.8	CRITICAL Network	mi	xiaomi_ai_speaker_firmware	Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-14096	2024-11-21 14:02	2020-09-11	Show	GitHub Exploit DB Packet Storm

214782	7.5	HIGH Network	bitcoin	bitcoin_core	Bitcoin Core 0.20.0 allows remote denial of service.	NVD-CWE-noinfo	CVE-2020-14198	2024-11-21 14:02	2020-09-11	Show	GitHub Exploit DB Packet Storm

214783	5.9	MEDIUM Network	apache oracle debian	activemq flexcube_private_banking communications_diameter_signaling_router debian_linux	Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and ca…	CWE-306 Missing Authentication for Critical Function	CVE-2020-13920	2024-11-21 14:02	2020-09-11	Show	GitHub Exploit DB Packet Storm

214784	5.7	MEDIUM Adjacent	health	covidsafe	In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection o…	NVD-CWE-noinfo	CVE-2020-14292	2024-11-21 14:02	2020-09-10	Show	GitHub Exploit DB Packet Storm

214785	7.2	HIGH Network	zohocorp	manageengine_applications_manager	Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-14008	2024-11-21 14:02	2020-09-5	Show	GitHub Exploit DB Packet Storm

214786	6.1	MEDIUM Network	enghouse	web_chat	Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from t…	CWE-79 Cross-site Scripting	CVE-2020-13972	2024-11-21 14:02	2020-09-4	Show	GitHub Exploit DB Packet Storm

214787	8.8	HIGH Network	dolibarr	dolibarr	Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess …	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-14209	2024-11-21 14:02	2020-09-3	Show	GitHub Exploit DB Packet Storm

214788	5.9	MEDIUM Network	apache netapp	cassandra oncommand_insight	In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to m…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-13946	2024-11-21 14:02	2020-09-2	Show	GitHub Exploit DB Packet Storm

214789	7.5	HIGH Network	atlassian	jira jira_software_data_center jira_server jira_data_center	Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affecte…	NVD-CWE-noinfo	CVE-2020-14178	2024-11-21 14:02	2020-09-1	Show	GitHub Exploit DB Packet Storm

214790	8.1	HIGH Network	mitel	micollab	The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A succe…	CWE-74 Injection	CVE-2020-13863	2024-11-21 14:02	2020-08-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed