Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230181 4.3 警告 smolinari - mwcal の php/cal_default.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5061 2012-12-20 18:52 2008-11-13 Show GitHub Exploit DB Packet Storm
230182 7.5 危険 PreProject.com - Pre Simple CMS の siteadmin/loginsucess.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5058 2012-12-20 18:52 2008-11-13 Show GitHub Exploit DB Packet Storm
230183 7.5 危険 zeeways - Zeeways PhotoVideoTube における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-5042 2012-12-20 18:52 2008-11-12 Show GitHub Exploit DB Packet Storm
230184 7.5 危険 Sweex - Sweex RO002 Router におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5041 2012-12-20 18:52 2008-11-12 Show GitHub Exploit DB Packet Storm
230185 4.3 警告 PHPNUKE - PHP-Nuke 用の League モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5039 2012-12-20 18:52 2008-11-12 Show GitHub Exploit DB Packet Storm
230186 5 警告 University of Washington - University of Washington IMAP Toolkit の c-client ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5006 2012-12-20 18:52 2008-11-10 Show GitHub Exploit DB Packet Storm
230187 7.5 危険 shahrood - Shahrood の ndetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5003 2012-12-20 18:52 2008-11-10 Show GitHub Exploit DB Packet Storm
230188 9.3 危険 UltraVNC - UltraVNC 用の vncviewer の関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5001 2012-12-20 18:52 2008-11-10 Show GitHub Exploit DB Packet Storm
230189 6.8 警告 phpx - PHPX の admin/includes/news.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5000 2012-12-20 18:52 2008-11-10 Show GitHub Exploit DB Packet Storm
230190 6.9 警告 ti kan - xmcd の ncsarmt および ncsawrap スクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4994 2012-12-20 18:52 2008-08-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201941 8.8 HIGH
Network 		webargs_project webargs flaskparser.py in Webargs 5.x through 5.5.2 doesn't check that the Content-Type header is application/json when receiving JSON input. If the request body is valid JSON, it will accept it even if the … CWE-352
 Origin Validation Error 		CVE-2020-7965 2024-11-21 14:38 2020-01-30 Show GitHub Exploit DB Packet Storm
201942 7.1 HIGH
Local 		linux linux_kernel fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel … CWE-416
 Use After Free 		CVE-2020-8428 2024-11-21 14:38 2020-01-29 Show GitHub Exploit DB Packet Storm
201943 5.4 MEDIUM
Network 		elementor website_builder The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user. CWE-79
Cross-site Scripting 		CVE-2020-8426 2024-11-21 14:38 2020-01-29 Show GitHub Exploit DB Packet Storm
201944 6.5 MEDIUM
Network 		cups_easy_\(purchase_\&_inventory\)_project cups_easy_\(purchase_\&_inventory\) Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php. CWE-352
 Origin Validation Error 		CVE-2020-8425 2024-11-21 14:38 2020-01-29 Show GitHub Exploit DB Packet Storm
201945 8.8 HIGH
Network 		cups_easy_project cups_easy Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php. CWE-352
 Origin Validation Error 		CVE-2020-8424 2024-11-21 14:38 2020-01-29 Show GitHub Exploit DB Packet Storm
201946 6.1 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.15. Inadequate escaping of usernames allows XSS attacks in com_actionlogs. CWE-79
Cross-site Scripting 		CVE-2020-8421 2024-11-21 14:38 2020-01-29 Show GitHub Exploit DB Packet Storm
201947 8.8 HIGH
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of com_templates causes a CSRF vulnerability. CWE-352
 Origin Validation Error 		CVE-2020-8420 2024-11-21 14:38 2020-01-29 Show GitHub Exploit DB Packet Storm
201948 8.8 HIGH
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause CSRF vulnerabilities. CWE-352
 Origin Validation Error 		CVE-2020-8419 2024-11-21 14:38 2020-01-29 Show GitHub Exploit DB Packet Storm
201949 8.8 HIGH
Network 		codesnippets code_snippets The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu. CWE-352
 Origin Validation Error 		CVE-2020-8417 2024-11-21 14:38 2020-01-29 Show GitHub Exploit DB Packet Storm
201950 5.5 MEDIUM
Local 		python python In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-8315 2024-11-21 14:38 2020-01-29 Show GitHub Exploit DB Packet Storm