Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230031 7.5 危険 slimcms - SlimCMS の redirect.php における管理ユーザを作成される脆弱性 CWE-287
不適切な認証
CVE-2008-5708 2012-12-20 19:10 2008-12-24 Show GitHub Exploit DB Packet Storm
230032 6.9 警告 verlihub-project - Verlihub のデーモンにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-5706 2012-12-20 19:10 2008-12-22 Show GitHub Exploit DB Packet Storm
230033 9.3 危険 verlihub-project - Verlihub のデーモンにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5705 2012-12-20 19:10 2008-12-22 Show GitHub Exploit DB Packet Storm
230034 4.3 警告 Skype Technologies S.A. - Firefox 用の Skype エクステンションにおける任意のデータをクリップボードに上書きされる脆弱性 CWE-DesignError
CVE-2008-5697 2012-12-20 19:10 2008-12-22 Show GitHub Exploit DB Packet Storm
230035 8.5 危険 WordPress.org - WordPress MU および WordPress の wp-admin/options.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5695 2012-12-20 19:10 2008-12-19 Show GitHub Exploit DB Packet Storm
230036 10 危険 sandbox - Sandbox の lib/jpgraph/jpgraph_errhandler.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-5694 2012-12-20 19:10 2008-12-19 Show GitHub Exploit DB Packet Storm
230037 6.5 警告 phparanoid - PHParanoid における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5673 2012-12-20 19:10 2008-12-18 Show GitHub Exploit DB Packet Storm
230038 6.8 警告 phparanoid - PHParanoid におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-5672 2012-12-20 19:10 2008-12-18 Show GitHub Exploit DB Packet Storm
230039 6.8 警告 Textpattern - Textpattern におけるセッションのハイジャック後パスワードを変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-5670 2012-12-20 19:10 2008-12-18 Show GitHub Exploit DB Packet Storm
230040 5 警告 Textpattern - Textpattern のコメントプレビューセクションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-5669 2012-12-20 19:10 2008-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214761 5.4 MEDIUM
Network
soplanning soplanning SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field. CWE-79
Cross-site Scripting
CVE-2020-15597 2024-11-21 14:05 2020-08-12 Show GitHub Exploit DB Packet Storm
214762 6.5 MEDIUM
Network
mozilla firefox A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS… NVD-CWE-Other
CVE-2020-15662 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
214763 6.5 MEDIUM
Network
mozilla firefox A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leaking a password for the current domain. This vulnerability affects Firefox for iO… CWE-522
 Insufficiently Protected Credentials
CVE-2020-15661 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
214764 8.8 HIGH
Network
mozilla
opensuse
canonical
firefox
firefox_esr
thunderbird
leap
ubuntu_linux
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory corruption and we presume that with enoug… CWE-787
 Out-of-bounds Write
CVE-2020-15659 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
214765 6.5 MEDIUM
Network
mozilla
canonical
thunderbird
firefox_esr
firefox
ubuntu_linux
The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file typ… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2020-15658 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
214766 7.8 HIGH
Local
mozilla firefox
firefox_esr
thunderbird
Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. *Note: Thi… CWE-427
 Uncontrolled Search Path Element
CVE-2020-15657 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
214767 8.8 HIGH
Network
mozilla
opensuse
canonical
thunderbird
firefox_esr
firefox
leap
ubuntu_linux
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only … CWE-843
Type Confusion
CVE-2020-15656 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
214768 6.5 MEDIUM
Network
mozilla
opensuse
canonical
thunderbird
firefox_esr
firefox
leap
ubuntu_linux
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. This vulnerability affe… NVD-CWE-noinfo
CVE-2020-15655 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
214769 6.5 MEDIUM
Network
mozilla
canonical
thunderbird
firefox_esr
firefox
ubuntu_linux
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived brok… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-15654 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
214770 6.5 MEDIUM
Network
mozilla
canonical
thunderbird
firefox_esr
firefox
ubuntu_linux
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed po… NVD-CWE-Other
CVE-2020-15653 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm