Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230701	7.5	危険	phpeasydata	-	PHPEasyData の annuaire.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2113	2012-12-20 18:52	2008-05-8	Show	GitHub Exploit DB Packet Storm

230702	5	警告	vicftps	-	VicFTPS におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-2031	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

230703	5.8	警告	RSAセキュリティ	-	Web の IIS 用の RSA Authentication Agent におけるオープンリダイレクトの脆弱性	CWE-200 情報漏えい	CVE-2008-2027	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

230704	4.3	警告	RSAセキュリティ	-	RSA Authentication Agent の WebID/IISWebAgentIF.dll におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2026	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

230705	7.5	危険	Simple Machines	-	SMF における CAPTCHA のテストを通過される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2019	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230706	4	警告	phpizabi	-	PHPizabi の template.class.php の AssignUser 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-2018	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230707	9.3	危険	watchfire	-	WatchFire AppScan の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2015	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230708	6.8	警告	pnflashgames	-	PostNuke 用の pnFlashGames モジュールの index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2013	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230709	7.5	危険	postnuke software foundation	-	PostNuke 用の PostSchedule モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2012	2012-12-20 18:52	2008-04-29	Show	GitHub Exploit DB Packet Storm

230710	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Directory Proxy Server におけるサーバに対するアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1995	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209691	9.8	CRITICAL Network	online_bus_booking_system_project	online_bus_booking_system	In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.	CWE-89 SQL Injection	CVE-2020-25273	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209692	6.1	MEDIUM Network	online_bus_booking_system_project	online_bus_booking_system	In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.	CWE-79 Cross-site Scripting	CVE-2020-25272	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209693	5.4	MEDIUM Network	phpgurukul	hospital_management_system	PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php.	CWE-79 Cross-site Scripting	CVE-2020-25271	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209694	5.4	MEDIUM Network	phpgurukul	hostel_management_system	PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.	CWE-79 Cross-site Scripting	CVE-2020-25270	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209695	7.1	HIGH Network	pyrocms	pyrocms	PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.	CWE-352 Origin Validation Error	CVE-2020-25263	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209696	4.3	MEDIUM Network	pyrocms	pyrocms	PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.	CWE-352 Origin Validation Error	CVE-2020-25262	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209697	5.4	MEDIUM Network	getsymphony	symphony	Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php	CWE-79 Cross-site Scripting	CVE-2020-25343	2024-11-21 14:17	2020-10-7	Show	GitHub Exploit DB Packet Storm

209698	5.3	MEDIUM Network	pritunl	pritunl	Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 401. However, if the username is valid, th…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-25200	2024-11-21 14:17	2020-10-2	Show	GitHub Exploit DB Packet Storm

209699	4.8	MEDIUM Network	mantisbt	mantisbt	An issue was discovered in MantisBT before 2.24.3. When editing an Issue in a Project where a Custom Field with a crafted Regular Expression property is used, improper escaping of the corresponding f…	CWE-79 Cross-site Scripting	CVE-2020-25288	2024-11-21 14:17	2020-10-1	Show	GitHub Exploit DB Packet Storm

209700	8.8	HIGH Network	observium	observium	An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted po…	CWE-22 CWE-434 Path Traversal Unrestricted Upload of File with Dangerous Type	CVE-2020-25149	2024-11-21 14:17	2020-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed