Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230701 7.5 危険 SoftbizScripts - Softbiz Jokes & Funny Pics Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2874 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
230702 7.5 危険 sharecms - ShareCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2870 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
230703 6.8 警告 webchamado - WebChamado の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2858 2012-12-20 18:52 2008-06-25 Show GitHub Exploit DB Packet Storm
230704 7.5 危険 softdivision - Maxtrade AIO の Trade モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2847 2012-12-20 18:52 2008-06-25 Show GitHub Exploit DB Packet Storm
230705 4.3 警告 traindepot - Traindepot の search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2839 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230706 5 警告 traindepot - Traindepot の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-2838 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230707 7.5 危険 sidb - Scientific Image DataBase の projects.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2834 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230708 10 危険 worldlevel - le.cms の admin/upload.php における管理者の認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-2833 2012-12-20 18:52 2008-06-24 Show GitHub Exploit DB Packet Storm
230709 10 危険 tmsnc - tmsnc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-2828 2012-12-20 18:52 2008-06-23 Show GitHub Exploit DB Packet Storm
230710 4.3 警告 Xerox - Xerox WorkCentre M123 などの組込み Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2825 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209381 5.4 MEDIUM
Network
yourls yourls Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload i… CWE-79
Cross-site Scripting
CVE-2020-27388 2024-11-21 14:21 2020-10-24 Show GitHub Exploit DB Packet Storm
209382 4.7 MEDIUM
Local
linux
fedoraproject
debian
linux_kernel
fedora
debian_linux
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condit… CWE-362
CWE-476
CWE-416
Race Condition
 NULL Pointer Dereference
 Use After Free
CVE-2020-27675 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
209383 5.3 MEDIUM
Local
xen
fedoraproject
debian
xen
fedora
debian_linux
An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during … CWE-787
 Out-of-bounds Write
CVE-2020-27674 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
209384 5.5 MEDIUM
Local
linux
debian
opensuse
xen
linux_kernel
debian_linux
leap
xen
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e995… NVD-CWE-noinfo
CVE-2020-27673 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
209385 7.0 HIGH
Local
xen
fedoraproject
opensuse
debian
xen
fedora
leap
debian_linux
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition tha… CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2020-27672 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
209386 7.8 HIGH
Local
xen
opensuse
debian
fedoraproject
xen
leap
debian_linux
fedora
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing… NVD-CWE-noinfo
CVE-2020-27671 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
209387 7.8 HIGH
Local
xen
opensuse
fedoraproject
debian
xen
leap
fedora
debian_linux
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-tabl… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2020-27670 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
209388 5.4 MEDIUM
Network
strapi strapi Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature. CWE-79
Cross-site Scripting
CVE-2020-27666 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
209389 7.5 HIGH
Network
strapi strapi In Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB (aka content-type-builder) routes. CWE-276
Incorrect Default Permissions 
CVE-2020-27665 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm
209390 9.8 CRITICAL
Network
strapi strapi admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality. NVD-CWE-noinfo
CVE-2020-27664 2024-11-21 14:21 2020-10-23 Show GitHub Exploit DB Packet Storm