Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230391 5 警告 radio toolbox - Steamcast におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2008-0548 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230392 4.3 警告 shoppingtree - CP の admin/utilities_ConfigHelp.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0547 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230393 7.5 危険 shoppingtree - CP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0546 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230394 10 危険 Simple DirectMedia Layer - SDL_image の IMG_lbm.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0544 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230395 7.5 危険 PreProject.com - Pre Dynamic Institution における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0543 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230396 4.3 警告 trixbox - trixbox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0540 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230397 6.8 警告 phpip - phpIP Management における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0538 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
230398 4.3 警告 softcart - SoftCart の SoftCart.exe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0523 2012-12-20 18:34 2008-01-31 Show GitHub Exploit DB Packet Storm
230399 7.5 危険 WordPress.org - WordPress 用の WassUp プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0520 2012-12-20 18:34 2008-01-31 Show GitHub Exploit DB Packet Storm
230400 9.3 危険 SQLiteManager - SQLiteManager の spaw/dialogs/confirm.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-0516 2012-12-20 18:34 2008-01-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209801 8.8 HIGH
Network
phpok phpok A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code. CWE-352
 Origin Validation Error
CVE-2020-19199 2024-11-21 14:09 2021-05-11 Show GitHub Exploit DB Packet Storm
209802 9.8 CRITICAL
Network
shopxo shopxo Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manipulating the parameter "user_id" in the HTML request. NVD-CWE-Other
CVE-2020-19778 2024-11-21 14:09 2021-04-14 Show GitHub Exploit DB Packet Storm
209803 9.8 CRITICAL
Network
coreftp core_ftp Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username. CWE-120
Classic Buffer Overflow
CVE-2020-19596 2024-11-21 14:09 2021-04-6 Show GitHub Exploit DB Packet Storm
209804 7.5 HIGH
Network
coreftp core_ftp Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username. CWE-120
Classic Buffer Overflow
CVE-2020-19595 2024-11-21 14:09 2021-04-6 Show GitHub Exploit DB Packet Storm
209805 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile. CWE-79
Cross-site Scripting
CVE-2020-19619 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209806 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing. CWE-79
Cross-site Scripting
CVE-2020-19618 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209807 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile. CWE-79
Cross-site Scripting
CVE-2020-19617 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209808 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing. CWE-79
Cross-site Scripting
CVE-2020-19616 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209809 7.5 HIGH
Network
flycms_project flycms Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-19613 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209810 6.1 MEDIUM
Network
insma wifi_mini_spy_1080p_hd_security_ip_camera_firmware Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page. CWE-79
Cross-site Scripting
CVE-2020-19643 2024-11-21 14:09 2021-03-30 Show GitHub Exploit DB Packet Storm