Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230291 4.4 警告 Scriptsez.net - ScriptsEZ.net Power Editor の editor.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2116 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
230292 4.3 警告 Scriptsez.net - ScriptsEZ.net Power Editor の editor.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2115 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
230293 7.5 危険 PreProject.com - Pre Shopping Mall の emall/search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2114 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
230294 7.5 危険 phpeasydata - PHPEasyData の annuaire.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2113 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
230295 5 警告 vicftps - VicFTPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2031 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
230296 5.8 警告 RSAセキュリティ - Web の IIS 用の RSA Authentication Agent におけるオープンリダイレクトの脆弱性 CWE-200
情報漏えい 		CVE-2008-2027 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
230297 4.3 警告 RSAセキュリティ - RSA Authentication Agent の WebID/IISWebAgentIF.dll におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2026 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
230298 7.5 危険 Simple Machines - SMF における CAPTCHA のテストを通過される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2019 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
230299 4 警告 phpizabi - PHPizabi の template.class.php の AssignUser 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2018 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
230300 9.3 危険 watchfire - WatchFire AppScan の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2015 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209331 6.1 MEDIUM
Network 		waimai_super_cms_project waimai_super_cms waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave. CWE-79
Cross-site Scripting 		CVE-2020-21505 2024-11-21 14:12 2021-10-6 Show GitHub Exploit DB Packet Storm
209332 6.1 MEDIUM
Network 		waimai_super_cms_project waimai_super_cms waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login. CWE-79
Cross-site Scripting 		CVE-2020-21504 2024-11-21 14:12 2021-10-6 Show GitHub Exploit DB Packet Storm
209333 7.5 HIGH
Network 		waimai_super_cms_project waimai_super_cms waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parame… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-21503 2024-11-21 14:12 2021-10-6 Show GitHub Exploit DB Packet Storm
209334 6.1 MEDIUM
Network 		xiuno xiunobbs A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter. CWE-79
Cross-site Scripting 		CVE-2020-21496 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
209335 6.1 MEDIUM
Network 		xiuno xiunobbs A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter. CWE-79
Cross-site Scripting 		CVE-2020-21495 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
209336 6.1 MEDIUM
Network 		xiuno xiunobbs A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0. CWE-79
Cross-site Scripting 		CVE-2020-21494 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
209337 5.3 MEDIUM
Network 		xiuno xiunobbs An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames. NVD-CWE-noinfo
CVE-2020-21493 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
209338 5.4 MEDIUM
Network 		maccms maccms Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field. CWE-79
Cross-site Scripting 		CVE-2020-21434 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
209339 6.5 MEDIUM
Network 		hongcms_project hongcms HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit. NVD-CWE-noinfo
CVE-2020-21431 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
209340 6.1 MEDIUM
Network 		maccms maccms A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload. CWE-79
Cross-site Scripting 		CVE-2020-21387 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm