Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230061	4.3	警告	phpPgAdmin	-	phpPgAdmin の libraries/lib.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5587	2012-12-20 18:52	2008-12-16	Show	GitHub Exploit DB Packet Storm

230062	4.3	警告	ProjectPier	-	ProjectPier におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5584	2012-12-20 18:52	2008-12-15	Show	GitHub Exploit DB Packet Storm

230063	6.8	警告	ProjectPier	-	ProjectPier の index.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-5583	2012-12-20 18:52	2008-12-15	Show	GitHub Exploit DB Packet Storm

230064	7.5	危険	scssboard	-	sCssBoard の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5578	2012-12-20 18:52	2008-12-15	Show	GitHub Exploit DB Packet Storm

230065	7.5	危険	scssboard	-	sCssBoard の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-5577	2012-12-20 18:52	2008-12-15	Show	GitHub Exploit DB Packet Storm

230066	7.5	危険	scssboard	-	sCssBoard の admin/forums.php における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-5576	2012-12-20 18:52	2008-12-15	Show	GitHub Exploit DB Packet Storm

230067	7.5	危険	proclanmanager	-	Pro Clan Manager におけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2008-5575	2012-12-20 18:52	2008-12-15	Show	GitHub Exploit DB Packet Storm

230068	7.5	危険	unscripts	-	Webmaster Marketplace の member.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5574	2012-12-20 18:52	2008-12-15	Show	GitHub Exploit DB Packet Storm

230069	4.3	警告	phpeppershop	-	PHPepperShop におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5569	2012-12-20 18:52	2008-12-15	Show	GitHub Exploit DB Packet Storm

230070	4.3	警告	php multiple newsletters	-	Triangle Solutions PHP Multiple Newsletters の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5566	2012-12-20 18:52	2008-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208651	8.8	HIGH Local	xen	xen	An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one …	CWE-787 CWE-193 Out-of-bounds Write Off-by-one Error	CVE-2020-29040	2024-11-21 14:23	2020-11-25	Show	GitHub Exploit DB Packet Storm

208652	6.1	MEDIUM Network	seeddms	seeddms	Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php.	CWE-601 Open Redirect	CVE-2020-28726	2024-11-21 14:23	2020-11-25	Show	GitHub Exploit DB Packet Storm

208653	9.8	CRITICAL Network	misp	misp	MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.	CWE-862 Missing Authorization	CVE-2020-29006	2024-11-21 14:23	2020-11-25	Show	GitHub Exploit DB Packet Storm

208654	5.4	MEDIUM Network	mediawiki	mediawiki	The PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll question, entered during Special:CreatePoll or Special:UpdatePoll.	CWE-79 Cross-site Scripting	CVE-2020-29003	2024-11-21 14:23	2020-11-24	Show	GitHub Exploit DB Packet Storm

208655	4.8	MEDIUM Network	mediawiki	mediawiki	includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator.	CWE-79 Cross-site Scripting	CVE-2020-29002	2024-11-21 14:23	2020-11-24	Show	GitHub Exploit DB Packet Storm

208656	9.8	CRITICAL Network	gitea	gitea	Gitea 0.9.99 through 1.12.x before 1.12.6 does not prevent a git protocol path that specifies a TCP port number and also contains newlines (with URL encoding) in ParseRemoteAddr in modules/auth/repo_…	NVD-CWE-noinfo	CVE-2020-28991	2024-11-21 14:23	2020-11-24	Show	GitHub Exploit DB Packet Storm

208657	9.8	CRITICAL Network	spip debian	spip debian_linux	prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, display_navigation, display_outils, imessage, and spip_ecran parameters.	NVD-CWE-noinfo	CVE-2020-28984	2024-11-21 14:23	2020-11-24	Show	GitHub Exploit DB Packet Storm

208658	6.1	MEDIUM Network	magicpin	magicpin	There is a Stored XSS in Magicpin v2.1 in the User Registration section. Each time an admin visits the manage user section from the admin panel, the XSS triggers and the attacker can able to steal th…	CWE-79 Cross-site Scripting	CVE-2020-28927	2024-11-21 14:23	2020-11-24	Show	GitHub Exploit DB Packet Storm

208659	5.3	MEDIUM Network	neomutt mutt debian	neomutt mutt debian_linux	Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and t…	CWE-287 CWE-755 Improper Authentication Improper Handling of Exceptional Conditions	CVE-2020-28896	2024-11-21 14:23	2020-11-24	Show	GitHub Exploit DB Packet Storm

208660	9.8	CRITICAL Network	winscp	winscp	Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a long file name.	CWE-120 Classic Buffer Overflow	CVE-2020-28864	2024-11-21 14:23	2020-11-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed