Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230541	6.8	警告	シマンテック	-	Symantec Altiris Notification Server Agent の GUI における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2794	2012-12-20 18:52	2008-06-17	Show	GitHub Exploit DB Packet Storm

230542	6.4	警告	Spamdyke	-	spamdyke の smtp_filter 関数におけるオープンメールリレーとしてサーバを使用される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2784	2012-12-20 18:52	2008-06-19	Show	GitHub Exploit DB Packet Storm

230543	7.5	危険	revokesoft	-	RevokeBB の Search System における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2778	2012-12-20 18:52	2008-06-19	Show	GitHub Exploit DB Packet Storm

230544	7.5	危険	phpraider	-	Simple Machines phpRaider の authentication/smf/smf.functions.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2769	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

230545	3.5	注意	xigla	-	Xigla Poll Manager XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2768	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

230546	6.5	警告	xigla	-	Xigla Poll Manager XE の search.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2767	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

230547	4.3	警告	xigla	-	Xigla Absolute Image Gallery XE におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2766	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

230548	7.5	危険	xigla	-	Xigla Absolute Image Gallery XE の gallery.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2765	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

230549	3.5	注意	xigla	-	Xigla Absolute Live Support XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2764	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

230550	6.5	警告	xigla	-	Xigla Absolute Live Support XE の search.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2763	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201221	5.4	MEDIUM Network	alfresco	alfresco	Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.	CWE-79 Cross-site Scripting	CVE-2020-8776	2024-11-21 14:39	2020-03-3	Show	GitHub Exploit DB Packet Storm

201222	6.1	MEDIUM Network	fiserv	accurate_reconciliation	Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter.	CWE-79 Cross-site Scripting	CVE-2020-8952	2024-11-21 14:39	2020-02-27	Show	GitHub Exploit DB Packet Storm

201223	5.4	MEDIUM Network	fiserv	accurate_reconciliation	Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager (Configuration Parameter Translation) page.	CWE-79 Cross-site Scripting	CVE-2020-8951	2024-11-21 14:39	2020-02-27	Show	GitHub Exploit DB Packet Storm

201224	8.1	HIGH Network	gurux	device_language_message_specification_director	An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301. When downloading OBIS codes, it does not verify that the downloaded files are actual OBIS codes and doesn't check for path trav…	CWE-22 Path Traversal	CVE-2020-8810	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201225	8.1	HIGH Network	gurux	device_language_message_specification_director	Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by mo…	CWE-494 Download of Code Without Integrity Check	CVE-2020-8809	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201226	6.1	MEDIUM Network	wpjobboard	wpjobboard	The WPJobBoard plugin 5.5.3 for WordPress allows Persistent XSS via the Add Job form, as demonstrated by title and Description.	CWE-79 Cross-site Scripting	CVE-2020-9019	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201227	5.3	MEDIUM Network	litecart	litecart	LiteCart through 2.2.1 allows admin/?app=users&doc=edit_user CSRF to add a user.	CWE-352 Origin Validation Error	CVE-2020-9018	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201228	5.4	MEDIUM Network	blackboard	blackboard_learn	Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor.	CWE-79 Cross-site Scripting	CVE-2020-9008	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201229	8.0	HIGH Network	litecart	litecart	LiteCart through 2.2.1 allows CSV injection via a customer's profile.	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2020-9017	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201230	9.8	CRITICAL Network	opensmtpd canonical fedoraproject debian	opensmtpd ubuntu_linux fedora debian_linux	OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTP…	CWE-125 Out-of-bounds Read	CVE-2020-8794	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed