Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230701	5	警告	sflog	-	sflog! におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0703	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

230702	9.3	危険	south river technologies	-	Titan FTP Server におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0702	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

230703	7.8	危険	print manager plus	-	Print Manager Plus 2008 Client Billing and Authentication におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0693	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

230704	4.3	警告	simon elvery WordPress.org	-	WordPress 用の Simon Elvery WP-Footnotes プラグイにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0691	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

230705	4.3	警告	smartscript	-	Smartscript Domain Trader の catalog.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0688	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

230706	7.5	危険	youtube	-	Youtube Clone Script の siteadmin/editor_files/includes/load_message.php におけるクロスサイトスクリプティングの脆弱性	CWE-94 コード・インジェクション	CVE-2008-0687	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

230707	7.5	危険	WordPress.org	-	WordPress 用の st_newsletter プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0683	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

230708	7.5	危険	WordPress.org	-	WordPress 用の Wordspew プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0682	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

230709	6.8	警告	phpshop	-	PHPShop の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0681	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

230710	7.5	危険	the everything development company	-	The Everything Development System の The Everything Development Engine における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0675	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209821	7.8	HIGH Local	irfanview	irfanview	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30.	CWE-787 Out-of-bounds Write	CVE-2020-23551	2024-11-21 14:13	2022-09-16	Show	GitHub Exploit DB Packet Storm

209822	7.8	HIGH Local	irfanview	irfanview	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82.	CWE-787 Out-of-bounds Write	CVE-2020-23550	2024-11-21 14:13	2022-09-16	Show	GitHub Exploit DB Packet Storm

209823	9.8	CRITICAL Network	owasp debian	owasp_modsecurity_core_rule_set debian_linux	Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass…	CWE-89 SQL Injection	CVE-2020-22669	2024-11-21 14:13	2022-09-3	Show	GitHub Exploit DB Packet Storm

209824	5.4	MEDIUM Network	phpgurukul	online_marriage_registration_system	Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field.	CWE-79 Cross-site Scripting	CVE-2020-23466	2024-11-21 14:13	2022-08-19	Show	GitHub Exploit DB Packet Storm

209825	7.5	HIGH Network	cling_project	cling	An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-23622	2024-11-21 14:13	2022-08-16	Show	GitHub Exploit DB Packet Storm

209826	5.5	MEDIUM Local	irfanview	irfanview	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-23563	2024-11-21 14:13	2022-07-18	Show	GitHub Exploit DB Packet Storm

209827	5.5	MEDIUM Local	irfanview	irfanview	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe.	NVD-CWE-noinfo	CVE-2020-23562	2024-11-21 14:13	2022-07-18	Show	GitHub Exploit DB Packet Storm

209828	5.5	MEDIUM Local	irfanview	irfanview	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722.	NVD-CWE-noinfo	CVE-2020-23561	2024-11-21 14:13	2022-07-18	Show	GitHub Exploit DB Packet Storm

209829	8.1	HIGH Network	microstrategy	microstrategy_web	A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers to conduct a server-side request forgery (SSRF) attack via…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-22983	2024-11-21 14:13	2022-05-13	Show	GitHub Exploit DB Packet Storm

209830	6.1	MEDIUM Network	microstrategy	microstrategy_web_sdk	Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the fileToUpload parameter to the uploadFile…	CWE-79 Cross-site Scripting	CVE-2020-22987	2024-11-21 14:13	2022-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed