Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230601 9.3 危険 pragyan - Pragyan CMS の cms/modules/form.lib.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3207 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
230602 4.3 警告 xomol - Xomol CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3202 2012-12-20 18:52 2008-07-17 Show GitHub Exploit DB Packet Storm
230603 7.8 危険 reSIProcate - ReSIProcate におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3199 2012-12-20 18:52 2008-07-14 Show GitHub Exploit DB Packet Storm
230604 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-3197 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230605 7.8 危険 yacc - yacc 内の skeleton.c における範囲外メモリのスタックにアクセスされる脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3196 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230606 6.8 警告 TWiki - TWiki の bin/configure におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3195 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
230607 6.8 警告 Pluck CMS - pluck の data/inc/themes/predefined_variables.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3194 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230608 7.5 危険 Sclek - jSite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3193 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230609 6.8 警告 Sclek - jSite の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3192 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230610 6.8 警告 vclcomponents - Relative Real Estate Systems の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3185 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209281 6.1 MEDIUM
Network 		os4ed opensis OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter. CWE-79
Cross-site Scripting 		CVE-2020-27409 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209282 7.5 HIGH
Network 		os4ed opensis OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users. CWE-287
CWE-640
Improper Authentication
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2020-27408 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209283 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts th… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27771 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209284 5.5 MEDIUM
Local 		imagemagick
debian 		imagemagick
debian_linux 		Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered … CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27770 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209285 7.8 HIGH
Local 		imagemagick
debian 		imagemagick
debian_linux 		A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the r… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27766 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209286 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero.… CWE-369
 Divide By Zero 		CVE-2020-27765 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209287 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the ran… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27767 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209288 6.8 MEDIUM
Local 		canonical snapcraft
ubuntu_linux 		In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both pl… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-27348 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm
209289 6.1 MEDIUM
Network 		lxml
redhat
debian
fedoraproject
netapp
oracle 		lxml
enterprise_linux
software_collections
debian_linux
fedora
snapcenter
communications_offline_mediation_controller
zfs_storage_appliance_kit 		A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A r… - CVE-2020-27783 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm
209290 7.5 HIGH
Network 		freedesktop
redhat
debian 		poppler
enterprise_linux
debian_linux 		A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' … CWE-824
 Access of Uninitialized Pointer 		CVE-2020-27778 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm